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scheduling  is  effected  by  one  naif  of  a  two  level  Traffic 
Controller  tnat  binds  processes  to  virtualized  processors. 
Inter-process  communication  mechanisms  for  synenronizatior. , 
mutual  exclusion,  and  message  passing  amen*;  cmrfsses  are 
provided  by  utilization  or  event^cunt  and  sequencer 
primitives.  The  implementation  structure  is  cased  upon 
levels  of  abstraction  and  is  loop  free  to  pprmit  future 
expansion  to  more  complex  members  of  tne  design  family. 
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This  thesis  addresses  the  implementation  of  process 
management  functions  for  the  Secure  Archival  Storage  System 
or  SASS.  This  system  is  designed  to  provide  multilevel 
secure  access  to  information  stored  for  a  network  of 
possibly  dissimilar  host  computer  systems  and  the  controlled 
sharing  of  data  amongst  authorized  users  of  the  SASS. 
Effective  process  management  is  essential  to  insure 
efficient  use  and  control  of  the  system. 

Among  the  major  accomplishments  of  tne  work  reported 
here  are  the  inclusion  of  provisions  for  efficient  process 
creation  and  management.  These  functions  are  provided 
through  the  establishment  of  a  system  Traffic  Controller  and 
the  creation  of  a  virtual  interrupt  structure.  An  effective 
mechanism  for  inter-process  communication  and 
synchronization  is  realized  through  an  Event  Manager  that 
makes  use  of  uniquely  identified  segments  supported «*y 
eventcount  and  sequencer  primitives.  A  hardware  controlled 
two  domain  operational  environment  is  created  with  the 

i 

necessary  interfacing  between  domains  provided  by  a  software 
“gate"  mechanism.  Additional  support  is  provided  through 
considerable  work  in  the  area  of  database  initialization  and 
a  technique  for  limited  dynamic  memory  allocation. 
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This  implementation  was  completed  on  the  commercial  AMC 
Am96/4116  MonoBoard  Computer  witn  a  standard  Multibus 
interface . 

A.  BACKGROUND 

The  brief  history  of  digital  computers  has  been 
cnaracteri 2ed  by  rapid  advances  in  hardware  technology  and  a 
continual  increase  in  the  number  and  variety  of  its 
applications.  The  advent  of  the  microprocessor  has  enabled 
virtually  every  level  of  our  society  to  mate  use  of  computer 
resources.  Today's  "desJt  top"  microcomputers,  costing  less 
than  a  thousand  dollars,  have  more  computing  power  than  the 
"giant"  computers  of  the  early  1950's  that  cost  hundreds  of 
times  that  amount. 

These  rapid  advances  in  computer  hardware  technology 
have  reversed  the  economics  of  the  computer  design 
environment.  While  hardware  costs  nave  decreased,  tne 
relative  costs  of  the  software  required  to  effectively 
utilize  tnis  hardware  has  steadily  increased  until  it  now 
dominates  the  overall  cost  of  a  computer  system.  This 
economic  reversal  requires  that  developed  software  be 
logical,  easy  to  read,  relatively  maintenance  free,  and  easy 
to  debug.  Unfortunately,  microcomputer  operating  systems  and 
applications  software  tend  to  be  highly  specialized,  thus 
failing  to  reasonably  exploit  the  potential  of  tne 
microprocessor. 


As  the  usage  of  computers  has  expanded,  expeciaily  In 
the  area  of  sensitive  information  handling,  the  need  for 
Information  security  has  received  greater  recognition.  While 
ad-hoc  attempts  nave  been  made  to  provide  internal  computer 
security  on  larger  systems,  the  problem  of  Information 
security  on  microprocessors  has  been  largely  ignored  to 
date. 

In  an  attempt  to  address  the  above  problems,  O'Connell 
and  Richardson  [1]  outlined  a  high  level  design  for  a 
microprocessor  based  secure  operating  system.  The  goal  of 
this  design  was  to  provide  information  security,  distributed 
processing,  multiple  protection  domains,  configuration 
independence,  multiprocessing,  and  multiprogramming.  Since 
all  computer  applications  do  not  require  sucn  a  broad  and 
general  operating  system,  the  design  provided  for  a  family 
of  operating  systems.  This  allows  a  member  of  the  family  to 
incorporate  only  the  subset  of  family  functions  needed  for 
its  specific  application,  while  providing  for  future 
expansion.  Tne  SASS  is  a  member  of  tnis  operating  system 
family. 

A  brief  nistory  of  prior  wort  done  on  the  SASS  is  now 
provided.  Parks  [id  J  provided  the  design  for  the  SASS 
Supervisor.  The  actual  implementation  of  tne  Supervisor 
design  has  not  been  addressed  to  date.  The  Initial  design  of 
tne  SASS  Security  Kernel  was  completed  by  Coleman  [3J  .  The 
works  of  O'Connell  and  Richardson  [lj ,  Parks  [2J  ,  and 
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Coleman  [3]  are  available  as  a  single  publication  from  NTIS 
and  DDC  in  a  report  prepared  by  Schell  and  Cox  [21J  .  Further 
refinements  of  tne  Kernel  design  and  partiai  Kernel 
implementation  has  been  accomplished  in  three  additional 
thesis  efforts.  Moore  and  Gary  [4j  provided  the  detailed 
design  and  partial  implementation  of  the  Memory  Manager 
module.  Design  refinements  for  the  Inner  Traffic  Controller 
and  Traffic  Controller  modules  as  well  as  implementation  of 
the  Inner  Traffic  Controller  was  provided  by  Reitz  [5]. 
Wells  [6]  provided  Implementation  of  the  Segment  Manager  and 
Non-Discretionary  Security  modules  as  well  as  partial 
implementation  of  distributed  Memory  Manager  functions. 
These  design  and  implementation  efforts  provided  the  basis 
for  the  worlr  described  nere. 

B.  BASIC  CONCEPTS/DEFINITIONS 

This  section  provides  an  overview  of  several  concepts 
essential  to  the  SASS  design.  Readers  familiar  with  SASS  or 
with  secure  operating  system  principles  may  wish  to  sJcip  to 
the  next  section. 

1.  PrP££5S 

The  notion  of  a  process  has  been  viewed  in  many  ways 
in  computer  science  literature.  Organic*  [7]  defines  a 
process  as  a  set  of  related  procedures  and  data  undergoing 
execution  and  manipulation,  respectively,  by  one  of  possibly 
several  processors  of  a  computer.  Madnics  and  Donovan  [8J 


13 


view  a  process  as  the  locus  of  points  of  a  processor 
executing  a  collection  of  programs.  Reed  [9J  descrites  a 
process  as  tbe  sequence  of  actions  taJcen  by  some  processor. 
In  otner  words,  it  is  tne  past,  present,  and  future 
"history”  of  the  states  of  the  processor.  In  the  SASS 
design,  a  process  is  viewed  as  a  logical  entity  entirely 
characterized  by  an  address  space  and  an  execution  point.  A 
process'  address  space  consists  of  the  set  of  all  memory 
locations  accessible  by  the  process  during  its  execution. 
This  may  be  viewed  as  a  set  of  procedures  and  data  related 
to  the  process.  The  execution  point  is  defined  by  the  state 
of  the  processor  at  any  given  instant  of  process  execution. 

As  a  logical  entity,  a  process  may  have  logical 
attributes  associated  with  it,  such  as  a  security  access 
class,  a  unique  identifier,  and  an  execution  state.  This 
notion  of  logical  attributes  should  not  be  confused  witn  tne 
more  typical  notion  of  physical  attributes,  such  as  location 
in  memory,  page  size,  etc.  Ia  SASS ,  a  process  is  given  a 
security  access  class,  at  the  time  of  its  creation,  to 
specify  what  authorization  it  possesses  in  terms  of 
information  access  (to  be  discussed  in  the  next  section).  It 
is  also  given  a  unique  identifier  that  provides  for  its 
identification  by  the  system  and  is  utilized  for  Interaction 
among  processes.  A  process  may  exist  in  one  of  three 
execution  states:  1)  running,  2)  ready,  and  3)  blocked.  In 
order  to  execute,  a  process  must  be  mapped  onto  (bound  to)  a 
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pnysical  processor  In  tne  system.  Such  a  process  is  said  to 
be  in  the  "running"  state.  A  process  that  is  not  mapped  onto 

t 

a  pnysical  processor,  but  is  otherwise  ready  to  execute,  is 
in  the  "ready"  state.  A  process  in  tne  "blocked"  state  is 
waiting  for  some  event  to  occur  in  tne  system  and  cannot 
continue  execution  until  the  event  occurs.  At  that  time,  the 
process  is  placed  into  tne  ready  state. 

2.  Information  Security 

There  is  an  ever  increasing  demand  for  computer 
systems  that  can  provide  controlled  access  to  the  data  it 
stores.  In  this  thesis,  "information  security"  is  defined  as 
tne  process  of  controlling  access  to  information  based  upon 
proper  authorization.  The  critical  need  for  information 
security  should  be  clear.  Banks  and  other  commercial 
enterprises  risk  the  theft  or  loss  of  funds.  Insurance  and 
credit  companies  are  bound  by  law  to  protect  the  private  or 
otherwise  personal  information  they  maintain  on  their 
customers.  Universities  and  scientific  Institutions  must 
prevent  the  unauthorized  use  of  their  often  over-burdened 
systems.  Tne  Department  of  Defense  and  otner  government 
agencies  must  face  the  very  real  possibility  that  classified 
information  is  being  compromised  or  that  weapon  systems  are 
being  tampered  with.  In  fact,  security  related  problems  can 
be  found  at  virtually  every  level  of  computer  usage. 

In  tne  past,  attempts  nave  been  made  to  identify  tne 
security  weakness  of  computer  systems  by  trial  and  error  and 
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then  fix  them.  However,  Schell  [lej  has  shown  that  security 
cannot  he  "added  on"  to  an  existing  system  with  any  degree 
of  confidence  that  the  resulting  security  system  is 
impregnable.  Security  must  he  explicitly  designed  into  a 
system  from  first  principles.  The  Jtey  to  achieving  provable 
Information  security  is  realized  in  the  concept  of  the 
"security  Kernel."  Schell  Cl 1 J  provides  a  detailed 
discussion  of  the  use  of  this  concept  in  the  methodical 
design  of  system  security. 

The  security  of  computer  systems  processing 
sensitive  Information  can  be  achieved  by  two  means:  external 
security  controls  and  internal  security  controls.  In  the 
first  case,  security  is  achieved  by  encapsulating  the 
computer  and  all  its  trusted  users  within  a  single  security 
perimeter  established  by  pnysical  means  (e.g.,  armed  guards, 
fences,  etc.)  This  means  of  security  is  often  undesirable 
due  to  its  added  cost  of  implementation,  tne  innerent  risk: 
of  error-prone  manual  procedures,  and  the  problem  of 
trustworthy  but  error-prone  users.  Also,  since  all  security 
controls  are  external  to  the  computer  system,  the  computer 
is  Incapable  of  securely  nandling  data  at  differing  security 
levels  or  users  with  differing  degrees  of  authorization. 
This  restriction  greatly  limits  tne  utility  of  modern 
computers.  Internal  security  controls  rely  upon  the  computer 
system  to  internally  distinguish  between  multiple  levels  of 
information  classification  and  user  autnoriza tion .  This  is 
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clearly  a  more  desirable  and  flexible  approach  to 
Information  security.  This  does  not  mean»  however,  tnat 
external  security  is  not  needed.  The  optimal  approach  would 
be  to  utilize  internal  security  controls  to  maintain 
information  security  and  external  security  controls  to 
provide  physical  protection  of  our  system  against  sabotage, 
theft,  or  destruction.  Tne  primary  concern  of  this  thesis  is 
information  security  and  will  therefore  center  its 
discussion  on  the  achievement  of  information  security 
through  implementation  of  the  security  Kernel  concept. 

One  might  argue  that  a  "totally  secure"  computer 
system  is  one  that  allows  no  access  to  its  classified  or 
otherwise  sensitive  information.  Sucn  a  system  would  not  be 
of  much  value  to  its  users.  Therefore,  when  we  say  that  a 
system  provides  information  security,  it  is  only  secure  with 
respect  to  some  specific  external  security  policy 
established  by  laws,  directives,  or  regulations.  There  are 
two  distinct  aspects  of  security  policy:  non-discretionary 
and  discretionary.  Each  user  (subject)  of  the  system  is 
given  a  label  denoting  what  classification  or  level  of 
access  the  user  is  authorized.  Likewise,  all  information  or 
segments  (objects)  within  the  system  are  labelled  with  their 
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or  level  of 

sensitivity. 

The 
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is  responsible 
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comparing  the 

au 
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of 
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any,  should  be  granted.  The  DOD  security  classification 
system  provides  an  example  or  the  non-discretionary  security 
policy  and  is  tne  policy  implemented  in  SASS.  Tne 
discretionary  security  policy  is  a  refinement  of  the 
non-discretionary  policy.  As  sucn,  it  adds  a  nigner  degree 
of  restriction  by  allowing  a  subject  to  specify  or  restrict 
who  may  nave  access  to  nis  flies.  It  must  be  emphasized  that 
the  discretionary  policy  is  contained  within  the 
non-discretionary  policy  and  in  no  way  undermines  or 
substitutes  for  it.  This  prevents  a  subject  from  granting 
access  that  would  violate  the  non-discretionary  policy.  An 
example  of  discretionary  security  is  provided  by  tne  DOD 
"need  to  know"  policy.  In  SASS,  the  discretionary  policy  is 
implemented  witnln  the  supervisor  [2j  by  means  of  an  Access 
Control  List  (ACL).  There  Is  an  ACX  maintained  for  every 
file  in  tne  system,  wnich  provides  a  list  of  all  users 
authorized  access  to  that  file.  Every  attempt  by  a  user  to 
access  a  file  is  first  checked  against  tne  ACL  and  tnen 
checked  against  the  non-discretionary  security  policy.  The 
"least”  or  "most  restrictive”  access  found  in  tnese  checks 
is  then  granted  to  the  user. 

The  relationship  between  the  labels  associated  with 
the  subject's  access  class  (sac)  and  tne  object's  access 
class  (oac)  is  defined  by  a  lattice  model  of  secure 
information  flow  [12J  as  follows  ("!"  denotes  "no 
relati onshlp" ) : 
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1.  sac  *  oac,  read  and  write  access  permitted 

2.  sac  >  oac,  read  access  permitted 

3.  sac  <  oac,  write  access  permitted 

4.  sac  f  oac,  no  access  permitted 

In  order  to  understand  bow  tnese  access  levels  are 
determined,  it  is  necessary  to  gain  an  awareness  of  and 
consideration  for  several  basic  security  properties. 

The  "Simple  Security  Property”  deals  witn  "read" 
access.  It  states  that  a  subject  may  nave  read  access  only 
to  those  object's  whose  classification  is  less  than  or  equal 
to  tne  classification  of  the  subject.  This  prevents  a 
subject  from  reading  any  object  possessing  a  classification 
higher  than  his  own. 

The  "Confinement  Property"  (also  Known  as 
""-property" )  governs  "write”  access.  It  states  that  a  user 
may  be  granted  write  access  only  to  those  objects  whose 
classification  is  treater  than  or  equal  to  the 
classification  of  the  subject.  This  prevents  a  user  from 
writing  information  of  a  higher  classification  (e.g.. 
Secret)  into  a  file  of  a  lower  classification  (e.g.. 
Unclassified > .  It  is  noted  that  while  this  property  allows  a 
user  to  write  into  a  file  possessing  a  classification  higher 
than  his  own,  it  does  not  allow  him  access  to  any  of  the 
data  In  that  file.  The  SASS  design  does  not  allow  a  user  to 
"write  up"  to  higher  classified  flies.  Therefore,  in  SASS, 
"sac  <  oac"  denotes  "no  access  permitted." 
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The  "Compatibility  Property"  deals  with  the  creation 
of  objects  in  a  hierarchical  structure.  In  SASS,  objects 
(segments)  are  hierarchically  organized  in  a  tree  structure. 
This  structure  consists  of  nodes  with  a  root  node  from  which 
the  tree  eminates.  The  Compatibility  Property  states  that 
the  classification  of  objects  must  be  non-decreasing  as  we 
move  down  the  hierarchical  structure.  This  prevents  a  parent 
node  from  creatine  a  child  node  of  a  lower  classification. 

Several  prerequisites  must  be  met  in  order  to  Insure 
that  the  security  Kernel  design  provides  a  secure 
environment.  Firstly,  every  attempt  to  access  data  must 
invoice  the  Kernel.  In  addition,  the  Kernel  must  be  Isolated 
and  tamperproof.  Finally,  the  Kernel  design  must  be 
verifiable.  This  implies  that  the  mathematical  model,  upon 
wnich  the  Kernel  is  based,  must  be  proved  secure  and  tnat 
the  Kernel  is  shown  is  to  correctly  implement  this  model. 

3.  Segmentation 

Segmentation  is  a  Key  element  of  a  security  Kernel 
based  system.  A  segment  can  be  defined  as  a  logical  grouping 
of  information,  such  as  a  procedure,  file  or  data  area  [8J . 
Therefore,  we  can  redefine  a  process'  address  space  as  the 
collection  of  all  segments  addressable  by  tnat  process. 
Segmentation  is  the  technique  applied  to  effect  management 
of  those  segments  within  an  address  space.  In  a  segmented 
environment,  all  references  within  an  address  space  require 
two  components:  1)  a  segment  specifier  (number)  and  2)  tne 
location  (offset)  within  the  segment. 
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A  segment  may  nave  several  logical  and  pnysical 
attributes  associated  witn  it.  The  logical  attributes  may 
include  the  segment's  classification,  size,  or  permissable 
access  (read,  write,  or  execute).  Tnese  logical  attributes 
allow  a  segment  to  nicely  fit  the  definition  of  an  object 
within  the  security  Icernel  concept,  and  thus  provide  a  means 
for  the  enforcement  of  information  security.  A  segment's 
physical  attributes  include  the  current  location  of  the 
segment,  whether  or  not  the  segment  resides  in  main  memory 
or  secondary  storage,  and  wnere  tne  segment's  attributes  are 
maintained  by  a  segment  descriptor.  The  segment  descriptors 
for  each  segment  in  a  process'  address  space  are  contained 
within  a  Descriptor  Segment  (viz.,  the  MMU  Image  in  SASS)  to 
facilitate  the  memory  management  of  that  address  space. 

Segmentation  supports  information  sharing  by 
allowing  a  single  segment  to  exist  in  tne  address  spaces  of 
multiple  processes.  This  allows  us  to  forego  the  maintenance 
of  multiple  copies  of  tne  same  segment  and  eliminates  the 
possibility  of  conflicting  data.  Controlled  access  to  a 
segment  is  also  enforced,  since  each  process  can  nave 
different  attributes  (read/write)  specified  in  its  segment 
descriptor.  In  the  implementation  of  SASS,  any  segment  which 


is  shared, 

but 

has  "read 

only" 

access  by  every 

process 

sharing  it. 

is 

placed  in 

the 

processor  local 

memory 

supporting  each  of  these  processes  rather  than  in  the  global 
memory.  This  implies  the  maintenance  of  multiple  copies^of 
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some  snared  segments.  It  Is  noted  tnat  tne  problem  of 
"conflicting  data"  is  avoided  since  this  only  applies  to 
read  only  segments.  This  apparent  waste  of  memory  and  nonuse 
of  existing  snaring  facilities  is  justified  by  a  design 
decision  to  provide  maximum  reduction  of  bus  contention 
among  processors  accessing  global  memory.  This  reduction  in 
bus  contention  is  considered  to  be  of  more  importance  tnan 
the  saving  of  memory  space  provided  by  single  copy  snaring 
of  read  only  segments.  This  decision  is  also  well  supported 
by  tne  occurrence  of  decreasing  memory  costs,  wnicn  we  nave 


experienced  in  terms  of  nigh  speed  bus  costs. 

4-.  pmeaiafl  Jtem&ias 

The  requirement  for  isolating  the  Kernel  from  the 
remainder  of  the  system  is  achieved  by  dividing  tne  address 
space  of  each  process  into  a  set  of  hierarchical  domains  or 
protection  rings  [13J .  O'Connell  and  Ricnardson  [  1 J  defined 
three  domains  in  the  family  of  secure  operating  systems:  the 
user,  the  supervisor,  and  the  kernel.  Only  two  domains  are 
actually  necessary  in  the  SASS  design  since  it  does  not 
provide  extended  user  applications.  The  Kernel  resides  in 
the  inner  or  most  privileged  domain  and  has  access  to  all 
segments  in  an  address  space.  System  wide  data  bases  are 
also  maintained  within  tne  Kernel  domain  to  Insure  their 
accessibility  is  only  tnrougn  tne  Kernel.  Tne  Supervisor 
exists  in  tne  outer  or  least  privileged  domain  where  its 
access  to  data  or  segments  within  an  address  space  is 
restricted . 
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While  protection  domains  may  be  created  through 
either  hardware  or  software  mechanisms,  a  hardware 
Implementation  provides  much  greater  efficiency.  Current 
microprocessor  technology  only  provides  for  the 

Implementation  of  two  domains.  This  two  domain  restriction 
does  not  support  O'Connell  and  Richardson's  complete  family 
design,  but  it  is  sufficient  to  allow  hardware 

implementation  of  the  ring  structure  required  by  the  SASS 
subset. 

5.  Abstraction 

Dijlcstra  [14]  has  shown  tnat  tne  notion  of 
abstraction  can  be  used  to  reduce  tne  complexity  of  a 
problem  by  applying  a  general  solution  to  a  number  of 
specific  cases.  A  structure  of  increasing  levels  of 
abstraction  provides  a  powerful  tool  for  tne  design  of 
complex  systems  and  generally  leads  to  a  better  design  with 
greater  clarity  and  fewer  errors. 

Eacn  level  of  abstraction  creates  a  virtual 

hierarchical  machine  [8]  wnlcn  provides  a  set  of  "extended 
instructions"  to  the  system,  a  virtua'l*su$chlne  cannot  maxe 
calls  to  another  virtual  macnire  at  a  higher  level  of 
abstraction  and  in  fact  is  unaware  of  its  existence.  ...This 
Implies  that  a  level  of  abstraction  is  independent  of  any  ’ 
nigner  levels.  This  independence  provides  for  a  loop-free 
design.  Additionally,  a  higher  level  may  only  maxe  use  of 
the  resources  of  a  lower  level  by  applying  tne  extended 
instruction  set  of  the  lower  level  virtual  machine. 
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Therefore,  once  a  level  of  abstraction  Is  created,  any 
nigner  level  is  only  interested  in  the  extended  instruction 
set  it  provides  and  is  not  concerned  with  the  details  of  its 
implementation.  In  SASS,  once  a  level  of  abstraction  is 
created  for  the  physical  resources  of  the  system,  these 
resources  become  "virtualized"  maiing  the  nigner  levels  of 
the  design  independent  of  tne  physical  configuration  of  the 
system. 


C.  THESIS  STRUCTURE 

This  thesis  describes  the  implementation  of  the  process 
management  functions  for  tne  SASS.  The  design  base  for  this 
implementation  evolved  from  the  secure  family  of  operating 
systems  designed  by  O'Connell  and  Ricnardson  [lj .  Tne 
programming  language  utilized  in  this  implementation  was 
PIZ/ASM  assembly  code  [20J . 

Chapter  I  provided  an  introduction  to  the  Secure 
Arcnlval  Storage  System  and  a  discussion  of  tne  basic 
concepts  which  underlie  a  secure  operating  system 
envl ronment . 

Chapter  II  will  provide  a  discussion  of  tne  SASS  design. 
An  overview  of  the  entire  SASS  system  is  presented  along 
with  more  detailed  description  of  tne  modules  comprising 
SASS  and  their  associated  databases. 

Chapter  III  discusses  the  issues  bearing  on  this 
implementation  and  the  refinements  made  to  previous  SASS 
related  worx.  A  discussion  concerning  the  initialization  of 
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the  databases  utilized  by  tfle  current  SASS  demonstration  is 
also  presented. 

Chapter  IV  presents  the  implementation  of  process 
management  (viz.,  the  Traffic  Controller,  Event  Manager, 
Distributed  Memory  Manager,  and  Gate  Keeper  stub  modules).  A 
description  of  design  and  implementation  criteria,  and 
decisions  made  during  implementation  are  also  discussed  in 
this  chapter. 

Chapter  V  provides  the  conclusions  reached,  the  status 
of  the  researcn,  and  recommendations  relative  to  the 
continuation  and  extension  of  this  worx. 

Tne  appendices  include  tne  PLZ/ASM  code  for  tne  modules 
implemented  and  refined.  The  complete  program  listings  for 
the  Secure  Archival  Storage  System  may  be  obtained  from  a 
report  prepared  by  Schell  and  Cox  122]. 


\ 
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II.  S E CUR E  ARCHIVAL  STORAGE  SYSTEM  DESIGN 


This  chapter  provides  an  overview  of  the  SASS  in  its 
current  design  state.  Tne  intent  of  tnis  summary  is 
threefold.  First,  it  is  intended  to  provide  an  overall 
understanding  of  tne  SASS  itself.  Secondly,  it  will  provide 
an  interrelationship  between  the  worit  done  in  this  thesis 
and  previous  woric  performed  on  SASS.  Lastly,  it  provides  a 
current  base  upon  wnich  further  SASS  development  can  occur. 

A.  BASIC  SASS  OVERVIEW 

The  purpose  of  the  Secure  Archival  Storage  System  is  to 
provide  a  secure  "data  warehouse"  or  information  pool  wnicn 
can  be  accessed  and  shared  by  a  variable  set  of  host 
computer  systems  possessing  differing  security 
classifications.  The  primary  goals  of  the  SASS  design  are  to 
provide  information  security  and  controlled  sharing  of  data 
among  system  users. 

Figure  1  provides  an  example  of  a  possible  SASS  usage. 
Tne  system  is  used  exclusively  for  managing  an  archival 
storage  system  and  does  not  provide  any  programming  services 
to  its  users.  Thus  the  users  of  the  SASS  may  only  create, 
store,  retrieve,  or  modify  files  within  tne  SASS.  The  host 
computers  are  hardwired  to  the  system  via  the  I/O  ports  of 
the  Z8001  with  each  connection  naving  a  fixed  security 
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figure  1.  SASS  System 
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classification.  Eacft  ftost  must  nave  a  separate  connection 
for  eacn  security  level  it  wishes  to  vorit  on  (It  is 
important  to  note  tnat  Figure  1  only  represents  tne  logical 
interfacing  of  tne  system.  Specifically,  tne  actual 
connection  with  tne  nost  system  must  be  interfaced  with  the 

Kernel  as  the  I/O  instructions  for  tne  port  are  privileged). 

/ 

In  our  example,  Host  #1  can  create  and  modify  only  Top 
Secret  files,  but  it  can  read  files  which  are  Top  Secret, 
Secret,  Confidential,  or  Unclassified.  Likewise,  Host  #2  can 
create  or  modify  secret  files,  using  its  secret  connection 
or  confidential  files,  using  its  confidential  connection. 
Host  #2  cannot  create  or  modify  Top  Secret  or  Unclassified 
files. 

In  order  to  provide  information  security  and  controlled 
sharing  of  files,  the  SASS  operates  in  two  domains:  (l)  tne 
Supervisor  domain  and  (2)  tne  Kernel  domain.  The  SASS 
achieves  this  desired  environment  through  a  distributed 
operating,  system  design  wnicn  consists  of  two  primary 
modules:  the  Supervisor  and  the  Security  Kernel.  Each  host 
system  connected  to  tne  SASS  nas  associated  witn  it  two 
processes  within  the  SASS  which  perform  the  data  transfer 
and  file  management  on  benalf  of  that  host.  The  nost 
computer  communicates  directly  with  its  own  I/O  process  and 
File  Manager  process  within  the  SASS. 

We  can  use  our  notion  of  abstraction  to  present  a  system 
overview  of  the  SASS.  The  SASS  consists  of  four  primary 
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levels  of  abstraction: 

Level  3-Tne  Host  Computer  Systems 
Level  2-The  Supervisor 
Level  l-The  Security  Kernel 
Level  0-The  SASS  Hardware 

A  pictorial  representation  of  tnis  abstract  system  overview 
is  presented  in  Figure  2.  This  representation  is  limited  to 
a  dual  nost  system  for  clarity  and  space  restrictions.  Note 
that  the  Gate  Keeper  module  is  in  actuality  the  logical 
boundary  between  levels  one  and  two  and  as  sucn  will  be 
described  separately. 

Level  3,  the  host  computer  systems,  of  SASS  has  already 
been  addressed.  It  should  be  noted  that  the  SASS  design 
mates  no  assumptions  about  the  host  computer  systems. 
Therefore  each  host  may  be  of  a  different  type  or  size 
(i.e.-  micro,  mini,  or  maxi-computer  system).  Furthermore,' 
tne  necessary  physical  security  of  tne  host  systems  and 
their  respective  data  lints  with  the  SASS  is  assumed. 

B.  SUPERVISOR 

Level  2  of  the  SASS  system  Is  composed  of  the  Supervisor 
domain.  As  already  stated,  the  SASS  consists  of  two  domains. 
The  actual  implementation  of  these  domains  was  mreatly 
simplified  since  the  78001  microprocessor  provides  two  modes 
of  execution.  The  system  mode,  with  which  the  Kernel  was 
implemented,  provides  access  to  all  machine  instructions  and 
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Figure  2.  System  Overview  (Dual  Host) 

3e 


all  segments  within  the  system.  The  normal  mode,  with  which 
the  Supervisor  was  Implemented,  only  provides  access  to  a 
limited  subset  of  machine  instructions  and  segments  within 
the  system.  Therefore,  tne  Supervisor  operates  in  an  outer 
or  less  privileged  domain  than  the  Kernel. 

Tne  purpose  of  the  Supervisor  is  to  manage  the  data  Unit 
between  the  host  computer  systems  and  the  SASS  by  means  of 
Input/Output  control,  and  to  create  and  manage  tne  file 
hierarchy  of  each  host  within  the  SASS.  These  functions  are 
accomplished  via  an  Input/Output  (I/O)  process  and  a  File 
Manager  (FM)  process  within  the  Supervisor.  A  separate  FM 
and  I/O  process  are  created  and  dedicated  to  eacn  host  at 
the  time  of  system  initialization. 

1.  File  Manager  Process 

The  FM  process  directs  the  interaction  between  tne 
host  computer  systems  and  the  SASS.  It  interprets  all 
commands  received  from  the  Host  computer  and  performs  the 
necessary  action  upon  them  through  appropriate  calls  to  the 


Kernel.  The 

primary 

functions  of  tne 

FM 

process 

are 

tne 

management 

of  the 

Host's  virtual 

file 

system 

and 

the 

enforcement  of  the  discretionary  security  policy. 

The  virtual  file  system  of  the  Host  is  viewed  as  a 
nlerarcny  of  files  which  are  implemented  in  a  tree 
structure.  The  five  basic  actions  which  may  be  initiated 
upon  a  file  at  this  level  are:  1)  to  create  a  file,  2)  to 
delete  a  file,  3)  to  read  a  file,  O  to  store  a  file,  and  5) 
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to  modify  a  file.  The  FM  process  utilizes  a  FM  Known  Segment 
Taoie  (FM_KST)  as  tne  primary  database  to  aid  in  tnis 
management . 


Tne  FM  process  maintains  an  Access  Control  list 
(ACL)  through  wnich  it  enforces  tne  discretionary  security 
in  SASS.  Tne  FM  process  initializes  an  ACL  for  every  file  in 
its  Host's  file  system.  The  ACL  is  merely  a  list  of  all 
users  tnat  are  autnorized  to  access  tnat  file.  Tne  ACL  is 
checked  upon  every  attempt  to  access  a  file  to  determine  its 
autnori zation .  Tne  user  (nost  computer)  directs  tne  FM 
process  as  to  wnat  entries  or  deletions  snould  be  made  in 
tne  ACL,  and  as  sucn,  specifies  wno  ne  wisnes  to  nave  access 
to  his  file.  As  noted  earlier,  discretionary  security  is  a 
refinement  to  the  Non-Discretionary  Security  Policy  and 
therefore  can  only  be  utilized  to  add  furtner  access 
restrictions  to  those  provided  by  the  Non-Dlscretionary 
Security."  This  prevents  a  user  from  granting  access  to  a 
file  to  someone  who  otnerwise  would  not  be  autnorized 
access. 

2.  Input/Output  Process 

The  I/O  process  is  responsible  for  managing  the 
input  and  output  of  all  data  between  tne  nost  computer 
systems  and  tne  SASS.  The  I/O  process  is  subservient  to  the 
FM  process  and  receives  ail  of  its  commands  from  it.  Data  is 
transferred  between  tne  SASS  and  Host  Computer  systems  in 
fixed  size  "packets”.  These  packets  are  broken  up  into  tnree 


basic  types:  1)  a  synchronization  packet,  2)  a  corrmand 
packet,  and  3)  a  data  packet.  In  order  to  insure  reliable 
transmission  and  receipt  of  packets  between  the  Host 
computer  and  the  SASS,  there  must  exist  a  protocol  between 
them.  Parks  [2]  provides  a  more  detailed  description  of 
these  packets,  and  a  possible  multi-packet  protocol. 

C.  GATE  KEEPER 

The  primary  objective  of  the  gate  keeper  is  to  isolate 
the  Kernel  and  make  it  tamperproof.  This  *oal  is 
accomplished  by  reason  of  a  software  ring  crossing  mecnanism 
provided  by  the  *ate  keeper.  In  terms  of  SASS,  this  notion 
of  "ring-crossing”  is  merely  the  transition  from  tne 
Supervisor  domain  to  the  Kernel  domain.  As  noted  earlier, 
tne  gate  keeper  establishes  the  logical  boundary  between  the 
Supervisor  and  the  Kernel,  and  as  a  matter  of  course,  it 
provides  a  single  software  entry  point  (enforced  by 
hardware)  into  the  Kernel.  Therefore,  any  call  to  the  Kernel 
must  first  pass  through  the  gate  keeper. 

The  <rate  keeper  acts  as  a  trap  handler.  Cnee  it  is 
invoked  by  a  user  (Supervisor)  process,  the  hardware  preempt 
interrupts  are  masked,  and  the  user  process'  registers  and 
stack  pointer  are  saved  (within  tne  kernel  domain).  It  then 
takes  the  argument  list  provided  by  the  caller  and  validates 
these  passed  parameters  to  insure  tneir  correctness.  To  aid 
in  the  validation  of  these  parameters,  the  eate  keeper 
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utilizes  tne  Parameter  Table  as  a  database.  Tne  Parameter 


table  contains  all  of  tne  permitted  functions  provided  by 
tne  Kernel.  These  relate  directly  to  the  extended 
instruction  set  (viz..  Supervisor  calls)  provided  by  the 
Kernel  (these  extended  instructions  will  be  described  in  the 
next  section).  If  an  invalid  call  is  encountered  by  tne  gate 
Keeper,  an  error  code  Is  returned,  and  the  Kernel  is  not 
invoKed.  If  a  valid  call  is  encountered  by  tne  gate  Keeper, 
the  arguments  and  control  are  passed  to  the  appropriate 
Kernel  module. 

Once  the  Kernel  has  completed  its  action  on  the  user 
request,  it  passes  tne  necessary  parameters  and  control  bacK 
to  the  gate  Keeper.  At  this  point,  the  gate  Keeper 
determines  if  any  software  virtual  preempt  interrupts  nave 
occurred.  If  they  nave,  then  the  virtual  preempt  handler  Is 
InvoKed  vice  the  Kernel  bein*  exited  (virtual  interrupt 
structure  is  discussed  in  chapter  III).  Correspondingly,  if 
a  software  virtual  preempt  has  not  occurred,  then  the  return 
arguments  are  passed  to  tne  user  process.  Tne  user  process' 
registers  and  stacK  pointer  (viz.,  its  execution  point)  are 
restored  and  control  returned  to  tne  Supervisor  domain.  A 
detailed  description  of  the  Gate  Keeper  interface  and 
implementation  is  provided  in  chapter  IV. 
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D.  DISTRIBUTED  KERNEL 

Level  1  of  our  abstract  view  of  SASS  consists  of  two 
components:  the  distributed  Kernel  and  tne  non-distributed 
Kernel.  Tnese  two  elements  comprise  tne  Security  Kernel  of 
the  SASS.  The  Security  Kernel  has  two  primary  objectives:  1) 
tne  management  of  the  system's  nardware  resources,  and  2) 
the  enforcement  of  the  non-discretlonary  security  policy.  It 
executes  in  tne  most  privileged  domain  (viz.,  tne  system 
mode  of  the  Z8001)  and  has  access  to  all  machine 
instructions.  The  following  section  will  provide  a  brief 
description  of  the  distributed  Kernel,  its  components,  and 
the  extended  instruction  set  it  provides.  A  discussion  of 
the  non-distributed  Kernel  will  be  giver  in  the  next 
section. 

The  distributed  Kernel  consists  of  those  Kernel  modules 
whose  segments  are  contained  (distributed)  in  the  address 
space  of  every  user  (Supervisor)  process.  Thus,  in  effect, 
the  distributed  Kernel  is  shared  by  all  user  processes  in 
tne  SASS.  Tne  distributed  Kernel  is  composed  of  tne  Segment 
Manager,  the  Event  Manager,  the  Non-Discretionary  Security 
Module,  tne  Traffic  Controller,  tne  Inner  Traffic 
Controller,  and  the  Distributed  Memory  Manager  Module.  The 
Segment  Manager  and  the  Event  Manager  are  the  only  "user 
visible"  modules  in  the  distributed  Kernel.  In  other  words, 
the  set  of  extended  instructions  available  to  user  processes 
invoice  either  the  Segment  Manager  or  the  Event  Manager. 
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1.  Segment  Manager 

The  objective  of  tne  Segment  Manager  Is  the 
management  of  a  process'  segmented  virtual  storage.  The 
Segment  Manager  is  invoked  by  calls  from  the  Supervisor 
domain  via  the  gate  Keeper.  Calls  to  tne  Segment  Manager  are 
made  by  means  of  six  extended  instructions  provided  by  the 
segment  manager.  These  extended  instructions  (viz.,  entry 
points)  are:  1)  CREATE_SEGMENT ,  2)  DELETE_SEGMENT ,  3) 
MAKE_KNOWN,  4)  TERMINATE,  5)  SM_SWAP_IN,  and  6)  SM_SWAF_OUT. 
The  extended  instructions  CREATE_SEGMENT  and  DELETE_SEGMENT 
add  and  remove  segments  from  the  SASS.  MAKE_KN0W N  and 
TERMINATE  add  and  remove  segments  from  the  address  space  of 
a  process.  Finally,  SM_SWAP_IN  and  SM_SWAP_OUT  move  segments 
from  secondary  storage  to  main  storage  and  vice  versa. 

The  primary  database  utilized  by  the  Segment  Manager 
is  the  Known  Segment  Table  (KST) .  A  representation  cf  tne 
structure  of  tne  KST  is  provided  in  figure  3.  The  KST  is  a 
process  local  database  that  contains  an  entry  for  every 
segment  in  the  address  space  of  that  process.  The  KST  is 

''  i 

Indexed  by  segment  number  with  each  record  of  the  KST 
containing  descriptive  information  for  a  particular  segment. 
The  KST  provides  a  mapping  mechanism  by  which  tne  segment 
number  of  a  particular  segment  can  be  converted  into  a 
unique  nandle  for  use  by  the  Memory  Manager.  The  Memory 
Manager  will  be  discussed  in  the  next  section. 
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Known  Segment  Table  (KST) 
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The  purpose  of  the  Event  Manager  is  tne  management 


of  event  data  vhicn  is  associated  with  interprocess 
communications  within  tne  SASS.  This  event  data  is 
implemented  by  means  of  eventcounts  (a  synchronization 
primitive  discussed  by  Reed  [15J ) .  Tne  Event  Manager  is 
invoked,  via  the  Gate  Keeper,  by  user  processes  residing  in 
the  Supervisor  domain.  Tnere  are  two  eventcounts  associated 
with  every  segment  existing  in  the  Supervisor  domain.  These 
eventcounts  (viz..  Instance  l  and  Instance  2)  are  maintained 
in  a  database  residing  in  the  Memory  Manager.  The  Event 
Manager  provides  its  management  functions  tnrougn  its 
extended  instruction  set  READ,  TICKET,  AD7ANCE,  and  AWAIT, 
and  in  conjunction  with  tne  extended  instructions  TC_ADVANCE 
and  TC_AWAIT  provided,  by  the  Traffic  Controller  (to  te 
discussed  next).  These  extended  instructions  are  based  on 
the  mechanism  of  eventcounts  and  sequencers  [15],  The  Event 
Manager  verifies  the  access  permission  of  every  interprocess 
communication  request  through  the  Non-Discretionary  Security 
Module.  The  extended  instruction  READ  provides  tne  current 
value  of  the  eventcount  requested  by  the  caller.  TICKET 
provides  a  complete  time  ordering  of  possibly  concurrent 
events  through  the  mechanism  of  sequencers.  The  Event 
Manager  will  be  discussed  in  more  detail  in  chapter  IV. 


Non-Discretionary  Security  Module 


The  purpose  of  the  Non-Discretionary  Security  Module 


(NDS)  is  the  enforcement  of  the  non-discretionary  security 
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policy  of  tee  SASS.  Welle  tee  current  Implementation  of  SASS 
represeots  tee  Departmeet  of  Defense  security  policy,  any 
security  policy  wnicn  may  be  represented  through  a  lattice 
structure  112]  may  also  be  implemented.  Tee  NDS  is  invoiced 
via  its  extended  instruction  set:  CLASS_EQ  and  CLASS_GE.  Tee 
NDS  is  passed  two  classifications  which  it  compares  and  teen 
analyzes  their  relationship.  CLASS_EQ  will  return  a  true 
value  to  the  calling  procedure  only  if  the  two 
classifications  passed  were  equal.  The  CLASS_GE  instruction 
will  return  true  if  a  given  classification  is  analyzed  to  be 
either  greater  than  or  equal  to  another  given 
classification.  The  NDS  does  not  utilize  a  data  base  as  it 
worlcs  only  with  tne  parameters  it  is  passed. 


4. 


The  tasic  of  processor  scheduling  is  performed  by  the 


traffic  controller.  Saltzer  tie J  defines  traffic  controller 


as  tne  processor  multiplexing  and  control  communication 
section  of  an  operating  system.  Tne  current  SASS  design 


utilizes  Reed's  [9J  notion  of  a  two  level  traffic 
controller,  consisting  of:  1)  a  Traffic  Controller  (TC)  and 
2)  an  Inner  Traffic  Controller  (ITC). 


The  primary  function  of  the  Traffic  Controller  is 
the  scheduling  (binding)  of  user  processes  onto  virtual 
processors.  A  virtual  processor  (VP)  is  an  abstract  data 


structure  that  simulates  a  physical  processor  through  the 
preservation  of  an  executing  process'  attributes  (viz.,  tne 
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execution  point  and  address  space).  Multiple  VP's  may  exist 
for  every  physical  processor  in  the  system.  Two  VP's  are 
permanently  bound  to  Kernel  processes  (viz..  Memory  Manager 
and  Idle)  and  as  sucft  are  not  in  contention  for  process 
scheduling.  These  processes  and  tneir  corresponding  virtual 
processors  are  invisible  to  the  TC.  The  remaining  virtual 
processors  are  either  idle  or  are  temporarily  bound  to  user 
processes  as  scheduled  by  the  TC .  The  database  utilized  by 
the  TC  in  process  scheduling  is  the  Active  Process  Table 
(APT).  Figure  4  provides  the  structure  of  the  APT. 

The  APT  is  a  system-wide  Kernel  database  containing 
an  entry  for  every  user  process  in  the  system.  Since  the 
current  SASS  design  does  not  provide  for  dynamic  process 
creation/deletion,  a  user  process  is  active  for  the  life  of 
tne  system.  Therefore,  tne  size  of  tne  APT  is  fixed  at  tne 
time  of  system  veneration.  The  APT  is  logically  composed  of 
tnree  parts:  1)  an  APT  header,  2)  tne  main  body  of  tne  APT, 
and  3)  a  VP  table.  The  APT  header  includes:  1)  a  Lock  to 
provide  for  a  mutual  exclusion  mecnanism,  2)  a  Running  List 
indexed  by  VP  ID  to  identify  the  current  process  runninv  on 
each  VP,  3)  a  Ready  List,  which  points  to  tne  linked  list  of 
processes  which  are  ready  for  scheduling,  and  4)  a  blocked 
List,  which  points  to  the  linked  list  of  processes  which  are 
in  the  blocked  state  awaiting  the  occurrence  of  some  event. 

A  design  decision  was  made  to  incorporate  a  single 
list  of  blocked  processes  instead  of  the  more  traditional 
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Figure  4.  Active  Process  Table  (APT) 


notion  of  separate  lists  per  eventcount  because  of  its 
simplicity  and  its  ease  of  implementation.  Tnis  decision 
does  not  appreciably  affect  system  performance  or  efficiency 
as  the  "blocked”  list  will  never  be  very  long.  The  VP  table 
is  indexed  by  logical  CPU  number  and  specifies  tne  number  of 
VP's  associated  witn  the  logical  CPU  and  its  first  VP  in  the 
Running  list.  The  logical  CPU  number,  obtained  during  system 
initialization,  provides  a  simple  means  of  uniquely 
identifying  each  physical  CPU  in  the  system.  The  main  body 
of  the  APT  contains  the  user  process  data  required  for  its 
efficient  control  and  scheduling.  NEXT_AP  provides  the 
linked  list  threading  mechanism  for  process  entries.  The  DBR 
entry  is  a  handle  identifying  the  process'  Descriptor 
Segment  which  is  employed  in  process  switching  and  memory 
management.  The  ACCESS_CLASS  entry  provides  every  process 
with  a  security  label  that  is  utilized  by  the  Event  Manager 
and  the  Segment  Manager  in  the  enforcement  of  the 
Non-Discreti onary  Security  Policy.  The  PRIORITY  and  STATE 
entries  are  the  primary  data  used  by  the  Traffic  Controller 
to  effect  process  scheduling.  AFFINITY  identifies  the 
logical  CPU  which  is  associated  with  the  process.  VP  ID  is 
utilized  to  identify  the  virtual  processor  tnat  is  currently 
bound  to  the  process.  Finally,  the  EVENTCOUNT  entries  are 
utilized  by  the  TC  to  manage  processes  which  are  blocked  and 
awaiting  the  occurrence  of  some  event.  HANDLE  identifies  the 
segment  associated  with  tne  event,  INSTANCE  specifies  the 
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event*  and  COUNT  determines  which  occurrence  of  the  event  is 


needed . 


The  Traffic  Controller  determines  the  scheduling 


order  by  process  priority.  Every  process  is  assigned  a 
priority  at  the  time  of  its  creation.  Once  scheduled,  a 
process  will  run  on  its  VP  until  it  eitner  blocks  itself  or 
it  is  preempted  by  a  higher  priority  process.  To  insure  that 
the  TC  will  always  have  a  process  available  for  scheduling, 
there  logically  exists  an  "idle"  process  for  every  VP 
visible  to  the  TC.  These  "idle”  processes  exist  at  the 
lowest  process  priority  and,  consequently,  are  scheduled 
only  if  there  exists  no  useful  wortc  to  be  performed. 

The  Traffic  Controller  is  invoked  by  the  occurrence 
of  a  virtual  preempt  interrupt  or  through  its  extended 
Instruction  set:  ADVANCE,  AWAIT,  PROCESS_CLASS  ,  and 
GET_DBP._NU!“!BER .  ADVANCE  and  AWAIT  are  used  to  implement  the 
IPC  mechanism  envoked  by  the  Supervisor.  PROCESS_CLASS  and 
GET_DBR_NUttBER  are  called  by  the  Segment  manager  to 
ascertain  the  security  label  and  DBR  handle,  respectively, 
of  a  named  process.  A  more  derailed  discussion  of  the  TC  is 
provided  in  chapters  III  and  IV. 


The  Inner  Traffic  Controller  is  the  second  part  of 
our  two-level  traffic  controller.  Basically,  the  ITC 
performs  two  functions.  It  multiplexes  virtual  processors 
onto  the  actual  physical  processors,  and  it  provides  the 
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primitives  for  wnicn  inter-VP  communication  witnin  tne 
Kernel  is  implemented.  A  design  cnoice  was  made  to  provide 
eacfl  physical  processor  in  tne  system  vitn  a  small  fixed  set 
of  virtual  processors.  Two  of  tnese  VP's  are  permanently 
bound  to  tne  Kernel  processes.  Tne  Memory  Manager  is  tound 
to  the  highest  priority  VP.  Conversely,  tne  Idle  Process  is 
bound  to  tne  lowest  priority  VP  and,  as  a  result,  will  only 
be  scheduled  if  there  exists  no  useful  work  for  the  CFU  to 
perform.  Tne  primary  database  utilized  by  tne  ITC  is  tne 
Virtual  Processor  Table  (VPT).  Figure  5  illustrates  the  VPT. 

The  VPT  is  a  system  wide  Kernel  database  containing 
entries  for  every  CPU  in  the  system.  The  VPT  is  logically 
composed  of  four  parts:  1)  a  header,  2)  a  VP  data  table,  3) 
a  message  table,  and  4)  an  external  VP  list.  The  header 
includes  a  LOCK  (spin  lock)  tnat  provides  a  mutual  exclusion 
mechanism  for  table  access,  a  PUNNING  LIST  (indexed  by 
logical  CPU  #)  tnat  identifies  the  VP  currently  running  on 
the  corresponding  physical  CPU,  a  READY  LIST  (indexed  by 
logical  CPU  #)  wnicn  points  to  tne  linked  list  of  VP's  wnicn 
are  in  the  ready"  state  and  awaiting  scheduling  on  that 
CPU,  and  a  FPEE  LIST  wnicn  points  to  tne  linked  list  of 
unused  entries  in  the  message  table.  Tne  VP  data  table 
contains  tne  descriptive  data  required  by  tne  ITC  to 
effectively  manage  the  virtual  processors.  The  DBR  entry 
points  witnin  tne  MMU  Image  to  tne  descriptor  segment  for 
the  process  currently  running  on  tne  VP.  PRI  (Priority), 
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Figure  5.  Virtual  Processor  Table  (VPT) 


STATE,  IDLE_FLAG,  and  PREEMPT  are  tne  primary  data  used  by 
the  ITC  for  VP  scheduling.  PREEMPT  Indicates  whether  cr  not 
a  virtual  preempt  is  pending  for  tne  VP.  Tne  IDLE_FLAG  is 
set  whenever  the  TC  has  bound  an  "idle"  process  to  the  VP. 
Normally,  a  VP  with  tne  IDLE_FLAG  set  will  not  be  scneduled 
by  the  ITC  as  it  has  no  useful  worfc  to  perform.  In  fact, 
sucn  a  VP  will  only  be  scneduled  if  tne  PREEMPT  flag  is  set. 
This  scheduling:  will  allow  the  VP  to  be  griven  (bound)  to 
anotner  process.  PHYSICAL  PROCESSOR  contains  an  entry  from 
tne  Processor  Data  Seement  (PRDS)  that  Identifies  tne 
physical  processor  tnat  tne  VP  is  executing  on.  EJT_V?_ID  is 
the  identifier  by  which  the  VP  is  Known  by  the  Traffic 
Controller.  A  design  choice  was  made  to  nave  tne  EXT_VP_ID 
equate  to  an  offset  into  the  External  VP  List.  The  External 
v P  list  specifies  tne  actual  VP  ID  (viz.,  VPT  entry  number) 
for  each  external  VP  identifier.  This  precluded  the 
necessity  for  run  time  calculation  of  offsets  for  tne 
EXT_TrP_ID .  NEXT  READT  VP  provides  the  threading  mechanism 
for  tne  ’’Ready"  United  list,  and  MSG  LIST  points  to  tne 
first  entry  in  the  Message  Table  containing  a  message  for 
tnat  VP.  Tne  Message  Table  provides  storage  for  tne  messages 
generated  in  the  course  of  Inter-Virtual  Processor 
communications.  MSG  contains  tne  actual  communication  being 
passed,  while  SENDER  Identifies  the  VP  which  initiated  the 
communication.  NEXT_MSG  provides  a  threading  mecnanlsm  for 
multiple  messages  pending  for  a  single  VP. 
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Tiie  ITC  is  invoiced  by  means  of  its  extended 
instruction  set:  WAIT,  SIGNAL,  SWAP_VDBR,  IDLE,  SET_PP.EEMPT , 
and  RUNNING_VP.  WAIT  and  SIGNAL  are  tne  primitives  employed 
in  implementing  the  Inter-VP  communication.  SWAP_VDBR,  IDLE, 
SET_PRE£MPT,  and  RUNNING_VP  are  ail  invoiced  by  tne  Traffic 
Controller.  SWAP_VDBR  provides  the  means  by  whicn  a  user 
process  is  temporarily  bound  to  a  virtual  processor.  IDLE 
binds  the  "Idle”  process  to  a  VP  (the  implication  of  this 
instruction  will  be  discussed  later).  SET_PREEMPT  provides 
the  means  of  indicating  that  a  virtual  preempt  interrupt  is 
pending  on  a  VP  (specified  by  the  TC )  by  setting  the  PREEMPT 
flag  for  that  VP  in  the  VPT.  RUNNING_VP  provides  tne  TC  with 
the  external  VP  ID  of  the  virtual  processor  currently 
running  on  the  physical  processor. 

6.  Distributed  Memory  Manager 

The  Distributed  Memory  Manager  provides  an  interface 
structure  between  the  Segment  Manager  and  the  Memory  Manager 
Process.  Tnis  interfacing  is  necessitated  by  tne  fact  that 
the  Memory  Manager  Process  does  not  reside  in  the 
Distributed  Kernel  and  consequently  is  not  included  in  tne 
user  process'  address  space.  The  primary  functions  performed 
in  this  module  are  tne  establishment  of  Inter-VP 
Communication  between  the  VP  bound  to  its  user  process  and 
tne  VP  permanently  bound  to  the  Memory  Manager  Process,  tne 
manipulation  of  event  data,  and  the  dynamic  allocation  of 
available  memory.  Tne  Distributed  Memory  Manager  Module  is 
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invoked  fey  the  Segment  Manager  tnrougn  its  extended 
instruction  set:  MM_CREATE_ENTRY ,  MM_EEIETE_ENTRI ' 
MM_ACTI7ATE,  MM_DEACTI7ATE,  MM_SWA?_IN,  and  MM_SWAP_  OUT . 
Tnese  extended  instructions  are  utilized  on  a  one  to  one 
feasis  fey  tne  extended  Instruction  set  of  tfte  Segment  Manager 
(e.g . *  SM_SVAP_IN  utilizes  (calls)  MM_SWAP_IN).  wells  [6J 
provides  a  more  detailed  description  of  tnis  portion  of  tne 
Eistributed  Memory  Manager  and  tne  extended  instruction  set 
associated  with  it. 

The  Distributed  Memory  Manager  is  also  invoiced 
tnrougn  its  remaining  extended  Instructions: 
MM_READ_E7ENTC0UNT,  MM_TICKET ,  MM_AD7ANCE,  and  MM_ALLOCATE. 
These  Distributed  Memory  Manager  functions  will  be  discussed 
in  detail  in  chapter  17. 

E.  NON -DISTRIBUTED  KERNEL 

The  Non-Dist ri buted  Kernel  is  the  second  element 
residing  in  Level  l  of  our  abstract  system  view  of  the  SASS . 
Tne  sole  component  of  the  Non-Distributed  Kernel  is  the 
Memory  Manager  Process. 

1.  Memory  Manager  Process 

Tne  primary  purpose  of  tne  Memory  Manager  Process  is 
the  management  of  all  memory  resources  within  the  SASS. 
Tnese  include  tne  local  and  global  main  memories,  as  well  as 
the  hard-disk  based  secondary  storage.  A  dedicated  Memory 
Manager  Process  exists  for  every  CPU  in  tne  system.  Eacn  CPU 
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possesses  a  local  memory  where  process  local  segments  and 
snared,  non-writeable  segments  are  stored.  Tnere  is  also  a 
global  memory,  to  which  every  CPD  has  access,  where  the 
snared,  writeable  segments  are  stored.  It  is  necessary  to 
store  these  snared,  writeable  segments  in  the  Global  memory 
to  ensure  tnat  a  current  copy  exists  for  every  access. 

The  Memory  Manager  Process  is  tasted  by  other 
processes  within  the  Kernel  domain  (via  Signal  and  Wait)  to 
perform  memory  management  functions.  These  basic  functions 
include  the  allocation/deallocation  of  local  and  global 
memory  and  of  secondary  storage,  and  the  transfer  of 
segments  between  tne  local  and  global  memory  and  between 
secondary  storage  and  the  main  memories.  Tne  extended 
instruction  set  provided  by  tne  Memory  Manager  Process 
includes:  CREATE_  ENTRY ,  DELETE_ENTRY,  ACTIVATE,  DEACTIVATE, 
SWAP_IN,  and  SWAP_OUT.  These  instructions  correspond  one  to 
one  with  those  of  tne  Distributed  Memory  Manager  Module.  The 
system  wide  data  bases  utilized  by  all  Memory  Manager 
Processes  are  tne  Global  Active  Segment  Table  (G_AST ) ,  the 
Alias  Table,  tne  Dislr  Bit  Map,  and  tne  Global  Memory  Eit 
Map.  The  processor  local  databases  used  by  each  Memory 
Manager  Process  are  tne  Local  Active  Segment  Table  ( L_AST ) , 
and  the  Local  Memory  Bit  Map.  Gary  and  Moore  l4j  provide  a 
detailed  description  of  tne  Memory  Manager,  its  extended 
instruction  set,  and  its  databases. 
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A  summary  of  tne  extended  instruction  set  created  by 
the  components  of  tne  Security  Kernel  is  provided  by  Figure 
6.  One  mignt  question  tne  prudence  of  omitting 
?EYS_PFEEMPT_HANDLER  and  7IF.T_PRSEMPT_HANDi.ER  (viz.,  the 
nandier  routines  for  physical  and  virtual  interrupts'  from 
the  extended  instruction  set  as  both  of  tnese  interrupts  may 
be  raised  (viz.,  initiated)  from  within  the  Kernel.  A 
decision  was  made  to  not  classify  these  handlers  as 
"extended  instructions”  since  tney  are  only  executed  as  the 
result  of  a  physical  or  virtual  interrupt  and  as  such  cannot 
be  directly  invoiced  (viz.,  "called"}  by  any  module  in  the 
system.  A  summary  of  the  databases  utilized  by  Kernel 
modules  is  presented  in  Figure  ?. 

F.  SYSTEM  HARDWARE 

Level  0  of  the  SASS  consists  of  the  system  hardware. 
This  nardware  includes:  1)  tne  CPU,  2)  the  local  memory,  3) 
the  Global  memory,  4)  the  secondary  storage  (viz.  nard 
distc),  and  5)  tne  I/O  ports  connecting  tne  Host  computer 
systems  to  the  SASS.  Since  the  SASS  design  allows  for  a 
multiprocessor  environment,  there  may  exist  multiple  CPU's 
and  local  memories.  The  target  machine  selected  for  the 
initial  implementation  of  the  system  is  tne  Zilog  Z8001 
microprocessor  ll?J .  The  Z8001  is  a  general  purpose  16-bit, 
register  oriented  machine  that  has  sixteen  16-bit  general 
purpose  registers.  It  can  directly  address  8M  bytes  of 
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memory,  extensible  to  46M  bytes.  Tne  Z6001  arcnitecture 
supports  memory  segmentation  ana  two-domain  operations.  The 
memory  segmentation  capability  is  provided  externally  by  tne 
Zilog  Z8f?10  Memory  Management  Unit  (MMU).  Tne  zee  It?-  MMU  [1EJ 
provides  management  of  tne  Z8001  addressable  memory,  dynamic 
s°gment  relocation,  and  memory  protection.  Memory  segments 
are  variable  In  size  from  256  bytes  to  64 i  bytes  and  are 
identified  by  a  set  of  64  Segment  Descriptor  Registers, 
wnicn  supply  tne  information  needed  to  map  logical  memory 
addresses  to  pnyscal  memory  addresses.  Each  of  the  64 
Descriptor  Registers  contains  a  16-bit  base  address  field, 
an  e-bit  limit  field,  and  an  6-bit  attribute  field. 
Unfortunately,  tne  Z8001  nardware  was  not  available  for  use 
during  system  development.  Therefore,  all  worfc  to  date  nas 
been  completed  tnrougn  utilization  of  tne  Z8002 
non-segmented  version  of  the  Z8000  microprocessor  family 
[17 J  .  Tne  actual  nardware  used  in  tnis  implementation  is  tne 
Advanced  Micro  Computers  Amy6/4llb  MonoRoard  Computer  liyj 
containing  tne  AmZ8002  sixteen  bit  non-segmented 
microprocessor.  This  computer  provides  32K  bytes  of  on-board 
RAM,  8*  bytes  of  PROM/ROM  space,  two  RS232  serial  I/O  ports, 
24  parallel  I/O  lines,  and  a  standard  INTEL  Multibus 
interface.  Tne  general  structure  of  tne  design  nas  teen 
preserved  by  simulation  of  the  segmentation  hardware  in 
software.  Tnis  software  MMU  Image  (see  Figure  8)  is  created 
as  a  database  within  the  Inner  Traffic  Controller. 


DBR  No 


Base  Addr 


Limi  t 


Attri butes 


V 

(entries  for  one  DBF  #) 


i’lgure  8.  Memory  Management  Unit  ( MMU )  Image 
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Tne  MMD  Image  is  a  processor-local  database  indexed  by 
DJR_No.  Eacn  DS R_No  represents  one  record  witnic  the 
Image.  Eacn  record  is  an  exact  software  copy  of  tne  Segment 
Descriptor  Register  set  in  tne  nardware  MMU.  Each  element  of 
tnis  software  MWJ  Image  is  in  tne  same  form  utilized  by  tne 
special  I/O  instructions  to  load  the  nardware  MMU .  Eacr.  DBR 
record  is  indexed  cy  segment  number  (Segment_No) .  Eacn 
Segment_No  entry  is  composed  of  tnree  fields:  Base_Addr, 
Limit,  and  Attributes.  Base_Addr  is  a  16-bit  field  wnicn 
contains  tne  base  address  of  tne  segment  in  pfeyscal  memory. 
Limit  is  an  e-bit  field  tnat  specifies  tne  number  of 
contiguous  blocks  of  memory  occupied  by  tne  segment. 
Attributes  is  an  e-bit  field  representing  tne  eignt  flags 
which  specify  tne  segment's  attributes  (e.g.,  "read", 
"execute",  "write",  etc.). 


G .  SUMMARY 

An  extended  overview  of  tfte  current  SASS  design  nas  been 
presented  in  tnis  cnapter.  Tne  four  major  levels  of 
abstraction  comprising  tne  SASS  system  have  been  identified 
and  tne  major  components  of  eacn  level  nave  been  discussed. 
The  extended  instruction  set  provided  by  tne  Saj>S  kernel  was 
also  defined.  With  tnis  background,  tne  actual  details  cf 


tnis  Implementation  will  be  described  in  chapters  Ill  and 


Issues  bearing  on  tne  implementation  of  process 
management  and  refinements  made  to  existing  modules  are 
presented  in  tnis  chapter.  Process  management  for  tne  SASS 
was  provided  through  tne  implementation  of  the  Traffic 
Controller  Module,  the  Event  Manager  Module,  tne  Distributed 
Memory  Manager  Module,  and  a  Gate  Keeper  Stub  (system  trap'. 
Additionally,  since  a  demonstration/testbed  was  integral  to 
tne  testing  ard  verification  of  tne  implementation,  it  was 
necessary  to  complete  other  supportive  tasits.  These 
supportive  tasirs  included  limited  Kernel  database 
initialization,  revised  preempt  interrupt  handling 
mecnanisms.  Idle  process  definition  and  structure,  and 
additional  refinements  to  existing  modules. 

A.  DATABASE  INITIALIZATION 

Previous  wors  on  SASS  has  relied  on  statically  built 
databases,  which  proved  to  be  sufficient  for  demonstration 
of  a  single  processor,  single  nost  supported  system.  In  the 
current  demonstration,  multiple  hosts  are  simulated,  and  tne 
Kernel  data  structures  have  been  refined  to  represent  a 
multiprocessor  environment.  Since  a  multiprocessor  system 
was  unavailable  at  tne  time  of  tnis  demonstration,  several 
"runs"  were  made  and  traced,  using  different  iogicai  CPU 
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numbers,  to  snow  tne  correctness  of  tbis  structure.  Due  to 
tftis  multiprocessor  representation  and  simulation  of 
multiple  nosts,  tne  use  of  statically  built  Kernel  databases 

was  no  longer  convenient.  Therefore ,  it  became  necessary  to 
provide  initialization  routines  for  tne  dynamic  creation  of 
those  Kernel  databases  required  for  this  implementation. 
While  it  wa«  not  tne  intent  of  this  effort  to  implement 
system  initialization,  care  was  taKen  in  the  writing  of 
these  initializing  routines  so  that  they  might  be  utilized 
in  tne  system  intiaiization  implementation  with,  nopefuilv, 
minimal  refinement.  Database  initialization  was  restricted 
to  tnose  databases  existing  in  tne  Inner  Traffic  Controller 
and  the  Traffic  Controller.  Limited  elements  of  the  Known 
Segment  Table  (KST )  and  Global  Active  Segment  Table  ( G_  AST ) 
were  also  created  for  demonstration  purposes. 

1 .  Inner  Traffic  Controller  Initialization 

A  "Bootstrap  Loader"  Module,  whicn  logically  exists 
at  a  nlgner  level  of  abstraction  witnin  tne  Kernel,  was 
created  to  initialize  the  databases  of  the  Inner  Traffic 
Controller.  Tnls  initialization  includes  tne  creation  of:  l) 
the  Processor  Data  Segment  (PHDS),  2)  an  MMU  vap,  3)  Kernel 
domain  stacn  segments  for  Kernel  processes,  4)  allocation 
and  updating  of  MMU  entries  for  Kernel  processes,  and  5) 
Virtual  Processor  Table  (VPT)  entries. 

Tne  PRDS  was  loaded  with  constant  values  that 
specify  tne  physical  CPU  ID,  logical  CPU  ID,  and  number  of 


57 


VP's  allocated  to  the  CPU.  A  design  decision  was  made  to 
allocate  logical  CPU  ID's  in  increments  of  two  (beginning 
witn  zero)  so  tnat  taey  could  be  used  tc  directly  access 
lists  indexed  by  CPU  number.  Tne  MMU  map,  constructed  as  a 
"byte"  map,  was  created  to  specify  allocated  and  free  MMU 
Image  entries. 

A  separate  procedure,  CREATS_STACK ,  was  created  to 
establisn  tne  initial  Kernel  domain  stack  conditions  for 
Kernel  processes.  A  discussion  and  diagram  of  tnese  initial 
stack  conditions  is  presented  in  tne  next  section. 
ALLOCATE_MMU  cnecks  tne  MMU  Map  and  allocates  tne  next 
availabe  MMU  entry  to  tne  process  being  created.  The  PRDS  is 
inserted  in  tne  allocated  MMU  entry  and  tne  DBR  number  is 
returned  to  tne  calling  procedure.  Tne  DPR  number  (nandie) 
is  merely  tne  offset  of  tne  DBA  in  tne  MMU  Image.  Since  tne 
ITC  deals  witn  an  address  ratner  tnan  a  nandie,  a  procedure, 
GET_DBR_ADDR ,  was  created  to  convert  tnis  offset  into  a 
pnysical  address.  UPDAT5_MMU_IMAGE  is  tne  procedure  wnicn 
creates  or  modifies  MMU  Image  entries.  UPEATE_MMU_IMAGE 
accepts  as  arguments  the  DBR  number,  segment  number,  segment 
attributes,  and  segment  limits.  To  facilitate  process 
switching  and  control,  various  process  segments  must  possess 
tne  same  segment  number  system  wide.  This  is  accomplished 
luring  initialization  tnrougn  tne  use  of  tne 
UPDATE_MMU_lMAGE  procedure.  In  the  ITC,  these  segments 
Include  tne  PPDS  (segment  number  zero)  and  tne  Kernel  stack 
segment  (segment  number  one). 
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Tne  final  tasic  required  in  1TC  intiaiization  is  tne 
creation  of  the  VPT.  The  VPT  neader  is  initialized  with  tne 
"running"  and  "ready"  lists  pointers  set  to  a  'nil'  state, 
and  the  "free"  list  pointer  set  to  the  first  entry  in  tne 
message  table.  Virtual  Processor  entries  are  inserted  in  the 
main  body  of  the  VPT  by  the  U?DATE_VP_TA.8LE  procedure. 
Entries  are  first  made  for  the  VP's  permanently  bound  to  the 
Memory  Manager  and  Idle  processes.  The  VP  bound  to  the  MM 
process  is  eiven  a  priority  of  2  (highest),  and  the  VP  bound 
to  the  Idle  process  is  given  a  priority  of  Z  (lowest).  The 
External  VP  ID  for  both  of  these  VP's  is  set  to  "nil"  as 
they  are  not  visible  to  the  Traffic  Controller.  The 
remaining  VP's  allocated  to  tne  CPU  (viz.,  TC  visible  VP's) 
are  then  entered  in  the  VPT  with  a  priority  of  1 
(intermediate),  and  their  "idle"  and  "preempt"  flags  are 
set.  The  preempt  flag  is  set  for  these  TC  visible  VP's  to 
insure  proper  scheduling  by  the  Traffic  Controller.  Tne  EBP. 
for  these  remaining  VP's  is  initialized  with  the  Idle 
process  DBR.  A  discussion  of  "idle"  processes  ana  VP's  will 
be  provided  later  in  this  chapter.  The  External  VP  ID  for 
eacn  TC  visible  VP  is  merely  tne  offset  of  tne  next 
available  entry  in  the  EXTERNAL  VP  LIST.  This  External  VP  ID 
is  entered  in  tne  VPT,  and  tne  corresponding  V?  ID  (viz., 
VPT  Entry  ft)  is  entered  in  the  EXTERNAL  VP  LIST. 

Once  these  VPT  entries  nave  been  made,  it  is 
necessary  to  set  the  state  of  each  VP  to  "ready"  and  thread 


tnem  (by  priority)  Into  tne  appropriate  ready  list.  A  VPT 
threading  mechanism  was  provided  by  Reitz  [5j  in  procedure 
MAKE_READY.  However,  it  was  desired  to  nave  a  more  general 
threading  mechanism  tnat  could  be  used  for  other  lists. 
Procedure  1IST_INS£ET  was  created  to  provide  this  general 
threading  mechanism.  LIST_INSERT  is  logically  a  "library" 
function  tnat  exists  at  tne  lowest  level  of  abstraction  in 
tne  Kernel.  This  function  threads  an  object  into  a  list 
(specified  by  the  caller)  in  order  of  priority,  and  tnen 
sets  its  state  as  specified  by  tne  calling  parameters. 

Once  tne  "Bootstrap  Loader"  nas  completed  ITC 
initialization,  it  passes  control  to  tne  ITC  GETWORK 
procedure  to  begin  VP  scheduling. 

2.  Traffic  Controller  Initialization 

The  initialization  routines  for  tne  TC  include 
TC_INIT,  .  CPEATS_PROCESS,  and  CREATS_KST.  These  routines  are 
called  from  tne  Memory  Manager  process.  Tne  MM  process  was 
chosen  to  initiate  these  routines  as  it  is  bound  to  tne 
nighest  priority  VP  and  will  begin  running  immediately  after 
the  Inner  Traffic  Controller  is  initialized.  Procedure 
MM_ALLOCATE  was  written  to  allocate  memory  space  for  lata 
structures  during  initialization  (viz.,  Kernel  stacks,  user 
stacks,  and  AST's).  Memory  space  is  allocated  in  blocks  of 
lidii  (hex)  bytes.  MM_ALLOCATE  is  merely  a  stub  of  the  memory 
allocating  procedure  designed  by  Moore  and  Gary  [4j  . 


It  was  necessary  to  pass  long  lists  of  arguments  to 
the  TC  for  Initialization  purposes.  To  ail  in  this  passing 
of  parameters,  a  data  structure  template  was  used.  This 
template  was  created  by  declarin*  tne  parameters  as  a  data 
structure  in  botn  the  sending  and  receiving  procedures,  and 
then  imaging  this  structure  at  absolute  address  zero.  The 
process'  stack  pointer  was  then  decremented  ty  the  size  of 
the  parameter  data  structure,  and  the  parameters  were  loaded 
into  this  data  structure  indexed  by  tne  stack  pointer.  Tnis 
template  made  it  very  easy  to  send  and  receive  Ion*  argument 
lists  using  the  process'  stack  segment. 

TC_INIT  initializes  the  APT  header  and  virtual 
interrupt  vector  (discussed  later).  Each  element  of  tne 
running  list  is  marked  "idle”,  the  ready  and  blocked  lists 
are  set  to  "nil",  and  the  number  of  VP's  and  first  VP  for 
each  CPU  are  entered  in  the  VP  table.  The  address  of  the 
virtual  preempt  handler  is  then  passed  to  the  ITC  procedure 
CREATE_INT_VEC  for  insertion  in  tne  virtual  interrupt 
vector. 

CREATE_PROCESS  intiaiizes  user  processes  and  creates 
entries  in  the  APT.  ALLOCATE_MMU  is  called  to  acquire  a  DPR 
number,  and  an  APT  entry  is  created  with  tne  process 
descriptors  (viz.,  parameters).  Tne  process  is  then  declared 
"ready”  and  threaded  into  the  approciate  ready  list  by 
calling  the  threading  function,  LIST_INSERT.  A  user  stack  is 
allocated  and  UPDATE_MMU_It*AGE  is  called  to  include  tne  user 


stack  in  the  MMU  as  segment  number  tnree.  The  user  stack 
contains  no  information  or  user  process  initialization 
parameters  (viz.,  execution  point  and  address  space)  as  all 
processes  are  initialized  and  begin  execution  from  the 
Kernel  domain.  Next,  a  Kernel  domain  stack  is  allocated  and 
included  in  the  MMU  Image.  A  design  decision  was  made  to 
initialize  tne  Kernel  stacks  for  user  processes  with  tne 
same  structure  as  the  Kernel  process'  stacks.  The  rationale 
for  this  decision  is  presented  in  tne  next  section.  As  a 
result  of  this  decision,  it  became  possible  to  use  the 
CREATE_STACK  procedure  in  building  Kernel  domain  stacks  for 
both  Kernel  and  user  prosesses.  CREATE_STACK  was  therefore 
used  as  a  library  function  and  placed  in  tne  li Drary  module 
with  LIST-INSERT. 

Finally,  a  Known  Segment  Table  (KST)  stub  is  created 
to  provide  a  means  of  demonstrating  the  mechanism  provided 
by  tne  eventcounts  and  sequencers  for  interprocess 
communication  ( IPC )  and  mutual  exclusion.  Space  for  tne 
process'  KST  is  created  by  calling  MM_ALLOCATE.  The  KST  is 
then  included  in  tne  process'  address  space,  as  segment 
number  two,  by  U?DaTE_MMU_IMAGE.  initial  entries  are  made  in 
the  Known  Segment  Table  by  procedure  CREATE_£ST.  CR£ATE_KST 
makes  an  entry  in  the  KST  for  the  "root"  and  marks  tne 
remaining  KST  entries  as  "available."  Tne  Unique_ID  portion 
of  the  root's  handle  (viz.,  upper  two  words)  is  initialized 
as  -1  (for  convenience)  and  tne  G_AST  entry  number  portion 
of  the  handle  (viz.,  lowest  word)  is  initialized  with  zero. 
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3.  Additional  Initialization  Requirements 

As  already  mentioned,  tne  Memory  Manager  Process 
prepares  tne  arguments  utilized  Dy  TC_INIT,  CREATE_PRCC£SS . 
and  C?JEATE_X5?  for  TC  initialization  and  user  process 
creation.  Additionally,  tne  MM  process  creates  a  Global 
Active  Segment  Table  (G_AST)  stub  utilized  for  demonstration 
of  event  data  management.  The  G_AST  stub  is  declared  in  a 
separate  module  (viz.,  the  DEMO_DATABASE  Module)  with  tne 
format  prescribed  by  Moore  and  Gary  [4j  .  However,  the  only 
fields  initialized  and  utilized  by  this  implementation  are 
UNI 0UE_ID ,  SEQUENCER,  INSTANCE  1,  and  INSTANCE  2.  The 
eventcounts  and  sequencer  fields  are  initialized  as  zero 
whenever  an  entry  is  created  in  the  G_AST .  The  UNIQUE_II  is 
created  Just  to  support  this  demonstration  ana  does  not 
reflect  the  segment's  unique  identifier  as  specified  by 
Moore  and  Gary  [4j  .  In  tnls  demonstration,  TJNIQUE_ID  is 
built  with  the  parameters  passed  to  MM_ACTIVATE.  The  first 
word  in  UNIOUE_ID  is  the  G_AST  entry  number  of  tne  segment's 
parent,  and  the  second  word  is  the  segment's  entry  number 
into  tne  alias  table.  The  UNIQUE_ID  together  with  tne  offset 
of  the  segment's  entry  in  the  G_AST  comprise  the  segment 
HANDLE  maintained  in  tne  KST.  Tne  first  entry  in  tne  G_AST 
is  reserved  for  the  root,  and  is  initialized  with  an 
Unique_ID  of  minus  one  (-1).  It  snoull  be  noted  tnat  any 
call  to  MM_ACTI7ATE  for  a  segment  already  possessing  an 
entry  in  tne  G_AST  will  not  effect  any  changes  to  that 
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entry.  Tills  is  to  insure  tnat  a  single  G_AST  entry  exists 
for  every  segment  as  specified  by  Moore  and  Gary  [4j  . 


3.  PREEMPT  INTERRUPTS 

Various  refinements  were  made  in  tfte  handling  of  ootn 
pnysical  (hardware)  and  virtual  (software)  preempt 
interrupts.  A  hardware  preempt  is  a  non-vectored  interrupt 
tnat  invokes  tee  virtual  processor  scneauling  mecnanism 
(viz.,  ITC  GETVORK).  A  virtual  preempt  is  a  software 
vectored  interrupt  tnat  invokes  tne  user  process  scneauling 
mechanism  (viz.,  TC_GETWORK).  This  implementation  provides 
tne  notion  of  a  virtual  interrupt  tnat  closely  mirrors  tne 
behavior  of  a  hardware  interrupt.  In  particular,  there  are 
similar  constructs  for  initialization  of  a  nandler, 
invocation  of  a  handler,  masking  of  interrupts,  and  return 
from  a  handler.  As  with  most  hardware  interrupts,  a  virtual 
interrupt  can  occur  only  at  tne  comnletion  of  execution  for 


an  "instruction,"  where  each  kernel  entry  and  exit  for  a 
process  delimit  a  single  "virtual  instruction .  ’’ 


rsical  Preempt  Handler 


Tne  pnysical  preempt  nandler  resides  in  tne  virtual 
processor  manager  (viz..  Inner  Traffic  Controller).  The 
functions  it  perform  are:  l)  save  tne  execution  point,  2) 
invoke  ITC  GETVORK,  3)  check  for  virtual  preempt  interrupts, 
4)  restore  the  execution  point,  and  5)  return  control  via 
the  IRET  instruction.  Reitz  [5J  included  tne  hardware 


preempt  nandler  in  ITC  GETWORK  by  establishing  two  entry 
points  and  two  exit  points,  one  for  a  regular  call  to 
GETWORK  and  another  ror  the  preempt  interrupt.  He  had  a 
separate  procedure,  TEST_PREEMPT ,  that  was  used  to  cteci  for 
the  occurrence  of  virtual  preempt  interrupts.  This  structure 
worics  nicely,  but  it  requires  some  means  of  determining  how 
GETWORK  was  invoiced  so  that  the  proper  exiting  mechanism  is 
used.  This  was  resolved  by  incorporating  a  preempt  interrupt 
flag  in  the  status  register  blocic  of  every  process'  Kernel 
domain  stack  segment.  A  design  decision  was  made  to 
restructure  the  hardware  preempt  handler  into  a  single  and 
separate  procedure,  PHTS_PREEMPT_HANDLSR .  Tnis  allowed  ITC 
GETWORK  to  have  a  single  entry  and  exit  point,  and  it  lid 
away  witn  the  necessity  of  maintaining  a  preempt  interrupt 
flag  in  the  process  stacKs.  PKYS_PREEMPT_HANELER  was 
constructed  from  the  preempt  handling  code  in  GETWORK  and 
procedure  TEST_PREEMFT .  TEST_PRSE!*PT  was  deleted  from  the 
ITC  as  its  functions  were  performed  by  FH7S_PREEMPT-HAN£LER . 

A  further  refinement  was  made  to  the  hardware 
preempt  handler  dealing  with  the  method  by  which  tne  virtual 
preempt  handler  was  invoiced.  Reitz  IhJ  invoiced  the  virtual 
preempt  nandler  from  TEST_PRESMPT  oy  means  of  the  ’’call" 
Instruction.  Since  the  virtual  preempt  nandler  logically 
exists  at  a  nigner  level  of  abstraction  than  the  I^C,  this 
invocation  violated  our  notion  of  only  allowing  "calls"  to 
lower  or  equal  abstraction  levels.  However,  tnis  deviation 


was  necessitated  by  the  absence  of  a  virtual  interrupt 
structure.  Tnis  problem  was  alleviated  by  creating  a  virtual 
interrupt  vector  in  tfle  ITC  tnat  is  used  in  tne  sane  way  as 
tne  nardware  interrupt  vector.  Tne  virtual  preempt  was  given 
a  virtual  interrupt  number  (zero).  Tne  virtual  interrupt 
nandler  is  tnen  invoiced  by  means  of  a  "jump"  through  tne 
virtual  interrupt  vector  for  virtual  interrupt  nurDer  0. 
Tnis  invocation  occurs  in  tne  same  manner  tnat  tne  Handlers 
for  nardware  interrupts  are  invoke*.  Tne  virtual  interrupt 
vector  is  created  ty  procedure  CREaTE_INT_V£.C  . 
CREATE_INT_VEC  accepts  as  arguments  a  virtual  interrupt 
number  and  tne  address  of  tne  interrupt  nanaler.  Tne 
creation  of  tne  virtual  preempt  entry  in  tne  virtual 
interrupt  vector  is  accomplished  at  tne  time  of  the  Traffic 
Controller  initialization  oy  TC_INIT. 

2.  Virtual  Preempt  Handler 

Tne  virtual  oreempt  handler  (VIRT_PR2EMPT_HANLIER ) 
resides  in  the  user  process  manager  (viz.,  the  Traffic 
Controller).  The  functions  performed  by  VIRT_FREEMPT_HANDLER 
are:  1^  determine  tne  VP  ID  of  the  virtual  processor  being 
nreempted ,  2)  invoice  tne  orocess  scneduling  mechanism  (viz., 
TC_GSTXORK ) ,  and  3)  return  control  via  a  virtual  interrupt 
return.  Tne  correct  VP  ID  is  obtained  by  calling  RUNNING_VP 
in  the  ITC.  Tne  Active  Process  Table  is  then  locked,  and  tne 
state  of  tne  process  running  on  tnat  vp  is  changed  to 
"ready."  At  this  time,  process  scneduling  is  effected  by 
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calling  TC_G£TWORK.  Once  process  scheduling  is  completed, 
the  APT  is  unlocked  and  control  is  returned  via  a  virtual 

interrupt  return.  Tnis  virtual  interrupt  return  is  merely  a 

jump  to  tde  PREEMPT_pET  label  in  tne  nardware  preempt 
nandler  (Tnis  jump  emulates  tne  action  of  tne  1RET 
instruction  for  a  nardware  interrupt  return).  Tnis  label  is 
tne  point  at  wnich  the  virtual  preempt  interrupts  are 
unmaslced . 

All  Kernel  processes  are  initialized  to  appear  as 
tnougn  tney  are  returning  from  a  nardware  preempt  interrupt. 
All  user  processes  initially  appear  to  be  returning  from  a 
virtual  preempt  interrupt.  Therefore,  tne  initial  conditions 
of  a  process'  Kernel  domain  stacic  is  largely  influenced  by 

tne  stacir  manipulation  of  tne  preempt  nandiers.  Figure  9 

illustrates  the  initial  Kernel  domain  stacic  structure  for 
all  system  processes. 

The  initial  Kernel  Flag  Control  Word  (FCW)  value  is 
indicating  non-segmented  node,  system  mode  of 
operation,  ncn-vectored  interrupts  masked,  and  vectored 
interrupts  enabled.  The  Current  StacK  Pointer  value  is  set 
to  tne  first  entry  in  the  stacic  (viz.,  SP).  Tne  IRET  Frare 
is  tne  portion  of  tne  Kernel  stacic  affected  by  tne  IRET 
instruction.  The  first  element.  Interrupt  ID  (set  ro  "FFFF") 
is  merely  popped  off  of  tne  stacic  and  discarded.  Tne  next 
element.  Initial  FCW,  is  popped  and  placed  in  tne  system 
Flag  Control  Word.  Initial  FCW  is  set  to  "Sfc’fcfc?”  for  Kernel 
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Initial  Process  Stacit 


processes  and  "1800"  (indicating  normal  mode  witr.  ail 
interrupts  enabled)  for  user  processes.  Tfte  final  element  of 
tne  IRE'T  frame,  Initial  IC  is  popped  off  of  tne  stacjr  and 
placed  in  tne  program  counter  (PC^  resister.  Tnis  value  is 
initialized  as  tne  entry  address  of  tne  process  in  auesticn. 

The  "register"  entries  on  the  stack  represent  the 
initial  register  contents  for  tne  process  at  tne  beginning 
of  its  execution.  Since  tne  Kernel  processes  (viz.,  and 
Idle)  do  not  require  any  specific  initial  register  states, 
their  entries  reflect  the  register  contents  at  the  time  of 
stack  creation.  Initial  register  conditions  are  used  to 
provide  initial  "parameters"  required  by  the  user  processes. 
This  will  depend  largely  upon  tne  parameter  passing 
conventions  of  tne  implementation  language.  The  means  for 
register  initialization  was  provided  through  CRFATE_PRCCESS » 
however,  the  only  initial  register  condition  used  for  the 
user  processes  in  this  demonstration  was  register  #13. 
Register  #13  was  used  to  pass  tne  user  ID/Host  number  of  tne 
process  created.  This  value  is  utilized  by  the  user  process 
in  activating  the  segment  used  for  inter-process 
communication  between  a  Host's  File  manager  and  I/O 
processes.  Another  logical  parameter  passed  to  the  user 
processes  is  the  root  segment  number.  Tnis  did  not  require  a 
register  for  passing  in  tne  demonstration  as  it  is  Known  to 
be  the  first  entry  in  the  KST  for  all  processes.  The  N_S_P 
entry  on  tne  stack  represents  tne  initial  value  of  tne 
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****** 


normal  stack  pointer.  For  user  processes,  tnis  value  is 
obtained  vnen  tne  Supervisor  domain  stack  for  tnat  process 
is  created.  For  Kernel  processes,  this  value  is  set  to 
"FFFF”  since  they  execute  solely  in  tne  Kernel  domain  and 
nave  no  Superivsor  domain  stack.  Tne  Preempt  Return  Point 
specifies  tne  address  vnere  control  will  be  passed  once  tne 
process'  is  scheduled  and  tne  "return"  from  ITC  GETWORK 
is  executed.  For  Kernel  processes,  tnis  is  tne  point  witnin 
tne  hardware  preempt  handler  where  the  virtual  processor 
table  is  unlocked.  For  user  processes,  tnis  is  tne  point 
within  tne  virtual  preempt  handler  where  tne  Active  Process 
Table  is  unlocked. 

It  is  important  to  note  that  if  tne  APT  was  not 
unlocked  when  a  user  process  be?an  its  initial  execution, 
the  system  would  become  deadlocked  and  no  further  process 
scheduling  could  occur.  It  should  be  further  noted  that  tne 
initial  stack  conditions  for  user  processes  do  not  reflect  a 


valid  history  of  execution 
process  returning  from  I 
interrupt  would  reflect 
SVAPJTD3R  and  TC_GETWOEK  t 
handler  where  the  APT 
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e  preempt  handler  (viz.,  at  the  point  of 
interrupt  unmasking)  and  an  additional 
interrupt  frame  wnose  IC  value  in  tne  IP.ET 
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C.  IDLE  PROCESSES 

In  tne  SASS  design,  mere  logically  exists  a  Kernel 
domain  "idle"  process  for  every  physical  processor  in  the 
system  and  a  Supervisor  domain  "idle"  process  for  every  "TC 
visible"  virtual  processor  in  tne  system.  These  processes 
are  necessary  to  insure  tnat  both  tne  VP  scheduler  (viz., 


ITC  GETWORK)  and  tne 

process  scheduler 

( TC_GETVORK ' 

will 

always 

nave  some 

object 

to  schedule,  nence  preciudi 

rg  any 

CPU  or 

VP  from  ever 

having 

an  undefined 

execution 

point . 

Since 

tne  Kernel 

domain 

Idle  process 

performs  no 

useful 

work,  1 

t  couid  be  included 

within  the  ITC 

by  means 

of  an 

infinite  looping  mechanism.  Tne  Kernel  Idle  process  was 
maintained  separately,  however,  as  it  is  hoped  that  future 
work  on  SASS  will  provide  tnis  Idle  process  vitn  some 
constructive  purpose  (e.g.,  performing  maintenance 
diagnostics ) . 
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The  Supervisor  domain  Idle  processes  (nereafter  referred 
to  as  TC  Idle  processes)  are  scheduled  (bound)  on  VP's  when 
there  are  no  user  processes  awaiting  scheduling.  Since  a  TC 
Idle  process  performs  no  user  constructive  worfc,  we  do  not 
want  any  VP  executing  a  TC  Idle  process  to  be  bcurd  to  a 
physical  processor.  In  other  words,  a  VP  bound  to  a  TC  Idle 
process  assumes  the  lowest  system  priority  (represented  by 
the  "idle  flag").  Therefore,  any  such  VP  will  have  its  idle 
flag  set  and  will  not  be  scheduled  unless  it  receives  a 


virtual  preempt  interrupt.  Such  an  interrupt  will  allow  the 
7?  to  be  rescheduled  cy  tne  Traffic  Controller.  It  snouid  be 
obvious,  at  this  point,  that  a  TC  Idle  process  will  never 
actually  begin  execution  on  a  real  processor.  Tnls  Knowledge 
allowed  a  design  decision  to  be  made  to  only  simulate  the 
existence  of  TC  Idle  processes.  At  tne  TC  level,  tnls  was 
accomplished  by  a  constant  value,  IDLS_?ROC,  that  was  used 
as  a  process  ID  in  tne  APT  running  list,  tnus  precluding  tne 
necessity  of  any  ’’idle"  entries  in  the  APT.  At  the  ITC 
level,  any  VP  marked  "idle"  (vij.,  tne  idle  flag  set)  was 
given  the  DPP.  number  (viz.,  address  space)  of  the  Kernel 
Idle  process  solely  to  provide  tne  use  of  a  Kernel  domain 
stack  for  rescheduling  of  the  VP. 

D.  ADDITIONAL  KERNEL  REFINEMENTS 

In  addition  to  those  already  discussed,  several  other 


refinements  to  existing  Kernel  modules  were  effected  in  tnls 


implementation.  One  of  tnese  refinements  deals  with  tr.e  way 
virtual  processors  are  identified  by  tne  Traffic  Controller. 
In  tr.e  current  implementation,  all  TC  visible  virtual 
processors  are  given  an  External  VP  ID  which  corresponds  to 
its  entry  number  in  ar.  External  VP  List.  This  required  a 
modification  to  the  ITC  procedure  PUNNIhG_V?.  The  benefits 
derived  from  this  refinement  included  the  ability  to 
directl*'  access  the  External  VP  ID  in  tne  Virtual  Processor 
Table  vice  the  requirement  of  a  run  time  division  to  compute 
its  value  and  the  anility  to  use  the  External  VP  ID  as  an 
index  into  tne  TC  running  list. 

Refinements  were  also  made  to  the  existing  Memory 
manager.  File  manager,  ana  10  process  stuts  used  for 
demonstration  purposes.  These  refinements  were  largely 
associated  with  tne  eventcount  and  sequencer  mecnanisms 
utilized  in  this  implementation.  The  current  status  of  these 
processes  is  provided  in  a  report  ty  Scneii  and  Cox  [22J . 

The  remaining  refinements  deal  largely  with  the  MMU 
Image.  In  Moore  and  Gary's  [4J  design,  tne  MMU  Image  was 
managed  by  the  Memory  Manager  process.  This  was  largely 
because  the  MMU  Image  is  a  processor  local  database  and 
would  seem  well  suited  for  management  cy  the  non-di stri buted 
Kernel.  In  fact,  tne  MMU  Image  is  utilized  mainly  cy  tne  ITC 
for  the  multiplexing  of  process  address  spaces.  Therefore, 
in  the  current  design,  tne  MMU  T  ->s  are  maintained  by  the 
Inner  Traffic  Controller,  however,  the  MMU  header  proposed 
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by  Poore  ana  Gary  (viz..  the  BL0CAS_TJS  ED  ana 
MAXI MUP_A7AI LABLE^ELOCKS  fields)  was  retained  in  tne  Memory 
Manager  as  it  is  usea  strictly  in  tne  management  of  a 
process'  virtual  core  and  is  not  associated  witn  tne 
nardware  PMU . 

In  Mells'  design  [6] ,  the  Traffic  Controller  used  tne 
linear  ordering  of  tne  DER  entries  in  tne  PMU  Image  as  the 
DER  handle  (viz.,  1,2,3...).  This  required  a  run  time 
division  operation  to  compute  the  DER  number,  and  a  run  time 
multiplication  operation,  by  PM_GE?_DBR_7ALUE ,  tc  recompute 
the  EER  address  for  use  by  the  ITC.  In  tne  current  design, 
the  offset  of  tne  DER  entry  in  the  PMU  Image  (obtained  at 
the  time  of  PPU  allocation)  is  used  as  tne  DER  nandle  in  tne 
Traffic  Controller.  Furthermore,  SWAF_VL’BR  was  refined  to 
accept  a  DBR  handle  ratner  tnar.  a  DER  address  to  preclude 
the  necessity  of  tne  Traffic  Controller  having  to  deal  with 
PPU  addresses.  DER  addresses  are  computed  oniv  within  the 
ITC  (viz.,  by  procedure  GET_EE?_ADDR  )  by  adding  tne  value  of 
tne  DER  handle  to  the  base  address  of  the  PPU  Image.  Since 
DER  addresses  are  now  used  solely  within  tne  ITC,  procedure 
mp_get_DER_V ALUE  was  no  longer  needed  and  was  deleted  from 
the  Pemcry  Manager. 

E.  SUMMARY 

Tne  primary  issues  addressed  in  tnis  thesis  effort  nave 
been  presented  in  this  cnapter.  Aside  from  tne  process 
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management  functions,  tms  description  included  a  mecnanlsm 
for  limited  Kernel  database  initialization,  a  revised 
preempt  interrupt  nandling  mecnanlsm,  tne  creation  of  a 
virtual  interrupt  structure,  a  definition  of  "idle" 
processes  and  tneir  structure,  and  a  discussion  of  tne  minor 
refinements  effected  in  existing  SASS  modules.  A  detailed 
description  of  tne  implementation  of  process  management 
functions  for  tne  SASS  is  presented  in  tne  next  cnapter. 
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PROCESS  MANAGEMENT  IMPLEMSNTATI CM 


Tne  implementation  of  process  management  functions  and  a 
gate  keeper  stub  (system  trap)  is  presented  in  tnls  chapter. 
Tne  implementation  is  discussed  in  terms  of  tne  Event 
Manager,  Traffic  Controller,  Distributed  Memory  Manager, 
User  Gate,  and  Kernel  Gate  Keeper  modules.  A  tiock  diagram 
depicting  tne  structure  and  interrelationships  of  these 
modules  is  presented  in  figure  It;.  Support  in  developing  the 
Z9000  machine  code  for  this  implementation  was  provided  by  a 
Zllog  MCZ  Developmental  System  operating  under  the  FIO 
operating  system.  The  Developmental  System  provided  disk 
file  management  for  a  dual  drive,  hard  sectored  floppy  disk, 
a  line  oriented  text  editor,  a  PLZ/ASM  assembler,  a  linker 
and  a  loader  that  created  an  executable  image  of  earn  Z 8000 
load  module.  An  upload/download  capability  with  the 
Am96/4116  MonoBoard  computer  was  also  provided.  This 
capability,  along  witn  tne  general  interfacing  of  the 
Am96/4116  into  the  SASS  system,  was  accomplished  in  a 
concurrent  tnesis  endeavor  by  Gary  Balter.  Baker's  work 
relating  to  hardware  initialization  in  SASS,  will  be 
published  upon  completion  of  his  thesis  work  in  June  1981. 
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Figure  10.  Implementati on  Module  Structure 


A.  EVENT  MANAGER  MODULE  _ 

The  eventcount  and  sequencer  primitives  Ll5! ,  which  are 
system-wide  objects,  collectively  comprise  the  event  data  of 
SASS.  As  mentioned  earlier,  this  event  data  is  tied  directly 
to  system  segments  and  is  stored  in  the  Global  Active 
Segment  Table.  There  are  two  eventcounts  and  one  sequencer 
for  every  segment  in  the  system.  These  objects  are 
identified  to  tne  Kernel  in  user  calls  by  specification  of  a 
segment  number.  Once  this  segment  number  is  identified  by 
tne  Kernel,  tne  segment's  handle  can  be  obtained  from  tne 
process'  Known  Segment  Table.  The  seement  handle  identifies 
tne  particular  entry  in  tne  G_AST  containing  tne  event  data 
desi red . 

Tne  Event  Manager  module  manages  tne  event  data  within 
the  system  and  provides  tne  mecnanlsm  for  interprocess 
communication  between  user  processes.  The  Event  Manager 
consists  of  sii  procedures.  Four  of  these  (Advance,  Await, 
Read,  and  Ticket)  represent  tne  four  user  extended 
instructions  provided  by  the  Event  Manager.  The  remaining 
two  procedures  provide  internal  computational  support  to 
include  necessary  security  cneclcing.  The  Event  Manager  is 
invoiced  solely  by  user  processes,  via  tne  Gate  Keeper, 
through  utilization  of  tne  extended  instruction  set 
provided.  For  every  Event  Manager  extended  instruction 
invoked  by  a  user  process,  tne  non-discretionary  security  is 
verified  by  comparing  the  security  access  classification  of 
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tne  process  invoicing  tne  instruction  with  tne  ciasslf i cation 
of  tne  object  (segment)  being  accessed.  Access  to  the  user 
process'  Known  Segment  Table  is  required  by  tne  module  in 
order  to  ascertain  tne  segment  candle  and  security  class  for 
a  given  segment  number.  The  PLZ/ASM  assembly  language 
listing  for  tne  Event  Manager  module  is  provided  in  Appendix 
A.  A  more  detailed  discussion  of  the  procedures  comprising 
tne  Event  Manager  follows. 

1 .  Support  Procedures 

Tne  procedures  GET_HANEL£  and  CON VERT_AND_ VERIFY 
provide  internal  support  for  tne  Event  Manager  and  are  not 
visible  to  tne  user  processes.  Procedure  CONVERT_AND_VEEIFY 
is  invoiced  by  tne  four  procedures  representing  the 
instruction  set  of  the  Event  Manager.  The  input  parameters 
to  CONV£RT_AND_VEHIPT  are  a  segment  number  and  a  requested 
mode  of  access  (viz.,  read  or  write>.  CON VERT_AND_VER1FY 
returns  a  pointer  to  tne  segment's  handle  and'  a  success 
code.  Procedure  G£T_HANDLE  is  invoiced  solely  by 
CON VERT_AND_VEF IFT .  The  input  parameter  to  GET_HAN1)LE  is  the 
segment  number  received  as  input  by  CONVERT_AND_VERIFY . 
GET_HANDLE  returns  a  pointer  to  tne  segment's  handle,  a 
pointer  to  tne  segment's  security  classification,  and  a 
success  code.  A  discussion  of  tne  functions  provided  by 
these  support  procedures  follows. 

Procedure  GET_EANDLE  translates  tne  segment  number, 
received  as  input,  into  a  KST  index  number  and  verifies  that 
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the  resulting  index  number  is  valid.  Next  tne  base  address 


iof  tne  process'  KST  is  obtained  from  procedure 
ITC_GET_SJ£G_?TR.  Tne  KST  index  number  is  tnen  converted  into 
l  a  KST  offset  value  and  added  to  tne  base  address  to  obtain 

tne  appropriate  KST  entry  pointer  for  tne  segment  in 
question.  A  verification  is  tnen  made  to  insure  tnat  tne 
referenced  segment  is  "inown"  to  tne  process.  If  tne  segment 
is  not  Known,  an  error  message  is  returned  to 
C0N7iiRT_AND_7ERIFY.  Otnerwise,  a  pointer  to  tne  segment's 
nandle  is  obtained  to  identify  tne  segment  to  tne  memory 
manager.  A  pointer  to  tne  segment's  security  class  entry  in 
tne  KST  is  also  returned  for  use  in  appropriate  security 
cneclcs . 

Procedure  C0NVERT_AND_7ERIFY  provides  tne  necessary 
non-discretionary  security  verification  for  tne  extended 
Instruction  set  of  tne  Event  Manager.  Procedure  GET_HANDIE 
is  invoked  for  segment  number  verification  and  to  obtain 
pointers  to  the  segment's  nandle  and  security  class.  If 
G£T_HANDLE  returns  vitn  a  successful  verification,  tne 
process'  security  class  is  compared  to  tne  segment's 
security  class  to  verify  tne  mode  of  access  requested.  A 
request  for  "write"  access  causes  invocation  of  tne  ClASS_EQ 
function  in  tne  Non-Dlscretionary  Security  Module  to  Insure 
tnat  the  security  classification  of  tne  process  is  equal  to 
the  classification  of  the  eventcount  or  sequencer,  which  is 
the  same  as  tnat  of  tne  segment.  Otherwise,  the  CLASS_GE 
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function  is  called  to  verify  tftat  the  process  nas  read 
access.  If  tne  appropriate  security  cnecic  is  unsuccessful, 
an  error  cede  is  returned  by  CONVS?.T_AND_  VERIFY .  Otherwise, 
tne  segment  nandie  is  returned  along  with  a  success  code  of 
"succeeded”  indicating  that  the  user  process  possesses  the 
necessary  security  clearance  to  complete  execution  of  the 
extended  instruction. 

2.  Read 

Procedure  READ  ascertains  tne  current  value  of  a 
user  specified  eventcount  and  returns  its  value  to  the 
caller.  Tne  input  parameters  to  READ  are  a  segment  number 
and  an  instance  (viz.,  an  event  number).  CON VE3T_AND_VSRIFY 
is  invoiced  with  a  "read"  access  request  to  obtain  tne 
segment's  handle  and  necessary  verification.  "Read"  access 
is  sufficient  for  this  operation  as  it  only  requires 
observation  of  tne  current  eventcount  value  and  performs  no 
data  modification.  If  verification  is  successful,  procedure 
'K*_READ_EVENTCOnNT  is  called  to  obtain  the  eventcount  value. 

3.  T1  ctcet 

Procedure  TICKET  returns  the  current  sequencer  value 
for  tne  segment  specified  by  the  user.  CONVERT_ANr_VEP.IFY  is 
called  with  a  request  for  write  access  to  obtain 
verification  and  the  segment  handle,  rfrite  access  is 
required  because  once  tne  sequencer  value  is  read  it  must  be 
incremented  in  anticipation  of  the  next  ticket  reauest.  Cnee 
verification  is  complete,  *1M_TICXET  is  invoiced  to  obtain  the 
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sequencer  value  that  is  returned  to  tfte  user  process.  It  is 
noted  tnat  every  call  to  TICKET  for  a  particular  segment 
number  will  return  a  unique  and  time  ordered  sequencer 
value.  This  is  because  tne  sequencer  value  may  only  be  read 
within  MPJTICKET  wnile  the  G_AST  is  locked,  thereby 
preventing  simultaneous  read  operations.  Futhermore,  once 
the  sequencer  value  is  read  it  is  incremented  before  the 
G_AST  is  unlocked. 

4 .  Await 

Procedure  AWAIT  allows  a  user  process  to  bioclt 
itself  until  some  specified  event  has  occurred.  The 
parameters  to  AWAIT  include  a  segment  number  and  instance, 
which  identify  a  particular  event,  and  a  user  specified 
value  which  identifies  a  particular  occurrence  of  the  event. 
Verification  of  read  access  and  a  pointer  to  tne  segment's 
handle  is  obtained  from  procedure  CONVERT_AND_VERIFI . 
Procedure  TC_AWAIT  is  invoked  to  effect  tne  actual  waiting 
for  the  event  occurrence.  TC_AWAIT  will  not  return  to  AWAIT 
until  the  requested  event  has  occurred.  It  is  ncted  tnat 
AWAIT  maKes  no  assumptions  about  the  event  value  specified 
Ky  the  user.  Therefore,  the  Kernel  cannot  guarantee  that  the 
event  specified  by  the  user  will  ever  occur;  this  is  the 
responsibility  of  other  cooperating  user  processes. 

b.  Advance 

Procedure  AL'VANCE  allows  a  user  process  to  broadcast 
the  occurrence  of  some  event.  This  is  accomplished  by 
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incrementing  tne  value  of  tne  eventcount  associated  with  tne 
event  tnat  has  occurred.  The  parameters  to  ADVANCE  include  a 
segment  number  and  instance  wnicn  Identify  a  particular 
event.  The  calling  process  must  nave  write  access  to  the 
identified  segment  as  modification  of  the  eventcount  is 
required.  Verification  of  write  access  and  a  pointer  to  tne 
segment's  handle  is  obtained  through  procedure 
CON  V£P.T_AND_  VERIFY.  Procedure  TC_ADVANCE  is  invoiced  to 
perform  the  actual  broadcasting  of  event  occurrence. 

£.  TRAFFIC  CONTROLLER  MODULE 

The  primary  functions  of  the  Traffic  Controller  module 
are  user  process  scheduling  and  support  of  tne  inter-process 
communication  mechanism.  The  Traffic  Controller  Is  invoiced 
by  tne  occurrence  of  a  virtual  preempt  interrupt  and  by  tne 
Event  Manager  and  the  Segment  Manager  through  tne  extended 
instruction  set:  TC_Advance ,  TC_Avalt,  Process_Class ,  and 
Get_DBR_N’JMBEP.  The  Traffic  Controller  module  is  comprised 
of  nine  procedures.  Four  of  these  procedures  represent  the 
extended  instruction  set  of  the  Traffic  Controller.  A 
detailed  discussion  of  six  of  the  procedures  contained  in 
the  Traffic  Controller  module  is  presented  below.  The 
remaining  tnree  procedures  (viz.,  TC_INIT,  CREATE_PRCCt’SS , 
and  C*EATE_KST)  were  described  in  chapter  three.  The  PLZ/ASM 
assembly  language  source  code  listings  for  tne  Traffic 
Controller  module  is  provided  in  Appendix  £. 


1 .  TC  Getworlc 

Procedure  TC_GETVIORK.  provides  tne  mechanism  for  user 

process  scheduling.  The  input  parameters  to  TC_Gi'rW0RK  are 

tne  7P  ID  of  tne  virtual  processor  to  which  a  process  will 

he  scheduled  and  the  logical  CPU  number  to  which  the  virtual 

processor  belongs.  Tne  determination  of  which  process  to 

schedule  is  made  by  a  looping  mechanism  that  finds  tne  first 
**  *• 


ready  process  on  the  ready  list  associated  with  the 
current  logical  CPU  number.  Processes  appear  in  tne  ready 
list  by  order  of  priority.  This  looping  mechanism  is 
required  as  both  "running"  and  "ready"  processes  are 
maintained  on  the  ready  list.  This  ready  list  structure  was 
cnosen  to  simplify  tne  algorithm  provided  in  procedure 
TC_Advance.  If  a  ready  process  is  found,  its  state  is 
cnanged  to  "running"  and  its  process  IE  (viz.,  the  APT  entry 
number^  is  inserted  in  tne  running  list  entry  associated 
wi  tn  tne  current  virtual  processor.  Procedure  S'j/AP_VEBR  is 
then  invoked  in  tne  Inner  Traffic  Controller  to  effect  the 
actual  process  switch.  If  a  ready  process  was  not  found 
(viz.,  the  ready  list  was  empty  or  comprised  solely  of 
"running  processes"),  tnen  tne  running  list  entry  associated 
with  the  current  virtual  processor  is  mariced  with  the 
constant  "ldie_Proc"  and  procedure  IDLE  is  Invoiced  in  tne 
Inner  Traffic  Controller. 
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'l .  TC  Await 

Tae  primary  function  of  TC_AWAIT  is  tne 
determination  of  whethe.  some  user  specified  event  nas 
occurred.  If  tne  event  nas  occured,  control  is  returned  to 
tne  caller.  Otnerwise,  the  process  is  blocked  and  anctner 
process  is  scneduied.  Tne  input  narameters  to  TC_AWAIT  are  a 
pointer  to  a  segment  nandle,  an  instance  (event  number),  and 
a  user  specified  eventcount  value.  TC_AWAIT  initially  locks 
tne  Active  Process  Table  and  obtains  tne  current  value  of 
tne  eventcount  in  question  by  calling  procedure 
MM_READ_Ef ENTCCUN T .  The  determination  of  event  occurrence  is 
made  by  comparing  tne  user  specified  eventcount  value  with 
tne  current  eventcount.  If  tne  user  value  is  less  than  or 
equal  to  tne  current  eventcount,  tne  awaited  event  nas 
occurred  and  control  is  returned  to  tne  caller.  Otnerwise, 
tne  awaited  event  nas  not  yet  occurred  and  tne  process  must 
be  blocked. 

If  the  process  is  to  be  blocked,  procedure 
?.UNNlNG_vp  is  invoked  to  ascertain  tne  VP  ID  of  tn<=  virtual 
processor  bound  to  the  process.  The  process'  IT  (viz.,  APT 
entry  number)  is  then  read  from  the  running  list.  The  input 
parameters  to  TC_AWAIT  (viz.,  Randle,  Instance,  and  Valued 
are  then  stored  in  tne  Event  Data  portion  of  tne  process' 
APT  entry.  Tne  process  is  removed  from  its  associated  ready 
list  by  redirecting  the  appropriate  linking  threads 
(pointers).  Once  removed  from  tne  ready  list,  tne  process  is 
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threaded  into  the  blocked  list  and  its  state  changed  to 
"blocked"  by  invocation  or  the  library  function  LIST_I NSERT . 
Procedure  TC_GETWORK  is  tnen  called  to  schedule  another 
process  for  the  current  virtual  processor. 

3.  TC  Advance 

The  primary  purpose  of  TC_ADVANCS  is  the 
broadcasting  of  some  event  occurrence.  This  entails 
incrementing  the  eventcount  associated  with  the  event, 
awakening  all  processes  that  are  waiting  for  the  event,  and 
insuring  proper  scheduling  order  by  generating  any  necessary 
virtual  preempt  interrupts.  Tne  nigh  level  design  algorithm 
for  TC_APV  ANCE  is  provided  in  figure  11.  The  input 
parameters  to  TC_ADVANCE  are  a  pointer  to  a  segment's  handle 
and  an  instance  (event  number).  Initially,  TC_ADVANCE  locks 
tne  APT  to  prevent  tne  possibility  of  a  race  condition.  Tne 
eventcount  identified  by  the  input  parameters  is  then 
incremented  by  calling  MM_ADVANCE.  MM_ADVANC£  returns  tne 
new  value  of  tne  eventcount.  Once  the  eventcount  has  been 
advanced,  TC_ADVANCE  awakens  all  processes  awaiting  tnis 
event  occurrence.  This  is  accomplished  by  checking  all 
processes  that  are  currently  in  tne  blocked  list.  The 
process'  HANDLE  and  INSTANCE  entries  are  compared  with  the 
nandie  and  instance  identifying  the  current  event.  If  they 
are  the  same,  tnen  the  process  is  awaiting  some  occurrence 
of  tne  current  event.  In  such  a  case,  tne  process'  VALUE 
entry  in  the  APT  is  compared  with  the  current  value  of  the 
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TC_ADVANCE  Procedure  (HANDLE,  INSTANCE) 
*in 

!  Get  new  eventcount  ! 

COUNT  :=  MM_ADVANCE  (HANDLE,  INSTANCE) 

Cali  tfAlT.LOCK  (APT) 

!  WaKe  un  processes  ! 

PROCESS  :=  BLOCKED  LIST  HEAD 


Do  wnile  not  end  of  BLOCKED_LIST 
If  (PROCESS. HANDLE  =  HANDLE)  and 

(PROCESS .INSTANCE  *  INSTANCE)  and 
(PROCESS. COUNT  <=  COUNT) 
tfien 

Call  LIST  INSERTUEADI  LIST) 
end  if 

PROCESS  :=  PROCESS .NfiXT_PROCESS 
end  do 

!  Cnectc  ail  ready  lists  for  preempts  ! 
L0GICAL_CPU_N0  :=  1 

Do  wnile  LOGICAL_CPU_NO  <=  #NR_CPU 
!  Initialize  nreempt  vector  T 
VP_ID  :*  FIRST_V’P(LOGICAL_CPU_NO ) 

Do  for  LOOP  :=  1  to  NR  VP( LOGICAL  CPU  NO 
RUNNING_LIST[VP_ID) .PREEMPT  :=  #TRUE 

VP_ID  :=  VP_ID  +  1 
end  do 

!  Find  preerpt  candidates  ! 

CANDIDATES  :  =  0 

PROCESS  :=  READV  LIST  HEAD (LOGICAL  CPU  NO) 


Figure  11.  TC_ ADVANCE  Algoritnir 


VP_ID  :=  FI3ST_7P(L0GICAL_CPU_N0) 

Do  (for  CYCLE  -  1  to  NR  7?(LGGICAL  CPU  N0)  and 
not  end  of  READ!  LIST(LCGICAL  CPU  NO) 

If  PROCESS  =  #RUNNI NG 
then 

RUNNING  LIST[VP_IDJ .PREEMPT  :=  #FALSE 
else 

CANDIDATES  :=  CANDIDATES  *  1 
end  if 

VP_ID  :=  VP  ID  +  1 
PROCESS  :=  PROCESS. NEXT_PROCESS 
end  do 

!  Preempt  appropriate  candidates  ! 

V«_ID  :=  FIRST_VP(LOGICAL_CPU_NO  ) 

Do  for  CHECK  :=  1  to  NR  VP(LOGICAL  CPU  NO' 

If  (RUNNING  LIST [VP  IDJ. PREEMPT  =  #TRUE )  and 
(CANDIDATES  >  0)“ 
tnen 

Cali  S£T_PR£EMPT( VP_ ID  ) 

CANDIDATES  :*  CANDIDATES  -  1 
end  if 

vp_ID  :»  VP_ID  ♦  1 
end  do 

IOGICAL_CPU_NO  :*  LOGI CAL_CPU_NO  +  1 
end  do 

Call  UNLOCK(APT) 

Return 

End  TC  ADVANCE 


Figure  11.  TC_ADVANCE  Algorithm  (Continued) 
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eventcount.  If  tne  process'  VALUE  is  less  tnan  or  equal  to 
the  current  eventcount  value,  tne  awaited  event  nas  occurred 
and  tne  process  is  removed  from  tne  blocked  list  and 
threaded  into  tne  appropriate  ready  list  by  tne  library 
function  LIST_INSERT. 

Once  tne  blocked  list  nas  been  checked,  it  is 
necessary  to  reevaluate  eacn  ready  list  to  insure  tnat  tne 
nignest  priority  processes  are  running.  It  is  relatively 
simple  to  determine  if  a  virtual  preempt  interrupt  is 
necessary,  nowever,  it  is  considerably  more  difficult  to 
determine  which  virtual  processor  should  receive  the  virtual 
preempt.  To  assist  in  tnis  evaluation,  a  "count”  variable 
(number  of  preempts  needed)  is  zeroed  and  a  preempt  vector 
is  created  on  the  Kernel  staci  with  an  entry  for  every 
virtual  processor  associated  with  the  logical  CPU  being 
evaluated.  Initially,  every  entry  in  the  preempt  vector  is 
marJted  "true”  indicating  that  its  associated  virtual 
processor  is  a  candidate  for  preemption.  Once  the  preempt 
vector  is  initialized,  tne  first  "n"  processes  on  tne  ready 
list  (where  n  equals  the  number  of  VP's  associated  with  the 
current  logical  CPU)  are  checked  for  a  determination  of 
their  state.  If  a  process  is  found  to  be  "running”  then  it 
snould  not  be  preempted  as  processes  appear  in  tne  ready 
list  in  order  of  priority.  When  a  running  process  is  found, 
its  associated  entry  in  tne  preempt  vector  is  marked 
"false.”  If  a  process  is  encountered  in  tne  "ready"  state 
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associated  virtual  processor  is  a  candidate  for  preemption 
since  it  is  eitner  bound  to  a  lower  priority  process,  or  it 
is  "idle."  In  sucn  a  case,  tne  "count"  variable  is  evaluated 
to  determine  if  the  virtual  processor  associated  vitfi  tfte 
vector  entry  should  be  preempted.  If  tne  count  exceeds  zero, 
a  virtual  preempt  interrupt  is  sent  to  tfte  VP  and  tfte  count 
is  decremented.  Otnerwise,  no  preempt  is  sent  as  mere  is  r.o 
higher  priority  process  awaiting  scheduling. 

This  preemption  algorithm  is  completed  for  every 
ready  list  in  the  Active  Process  Table.  Once  all  ready  lists 
nave  been  evaluated,  tne  APT  is  unlocked  and  control  is 
returned  to  tne  caller.  It  is  noted  that  it  is  not  necessary 
to  Invoke  TC_GETWORK  before  exiting  ADVANCE.  If  tne  current 
vp  requires  rescheduling,  it  will  nave  received  a  virtual 
preempt  interrupt  from  the  preemption  algorithm.  If  this  nas 
occurred,  tne  VP  will  be  rescheduled  wnen  its  running 
process  attempts  to  leave  tne  Kernel  domain  and  tne  virtual 
preempt  interrupts  are  unmasiced. 
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Virtual  Preempt  Handier 


VIRTUAL_PREEMPT_HANDLER  is  the  interrupt  nandler  for 
virtual  preempt  interrupts.  The  entry  address  of 
VIRTUAL_PRSEMPT_HAhDLER  is  maintained  in  the  virtual 
interrupt  vector  located  in  the  Inner  Traffic  Controller. 
Once  invoked,  tne  handler  locks  the  Active  Process  Table  and 
determines  which  virtual  processor  is  being  preempted  by 
calling  RUNNING.VP.  Tne  process  running  on  tne  preempted  VP 
is  then  set  to  the  "ready"  state  and  TC.GETWORK  is  invoked 
to  reschedule  tne  virtual  processor.  When  TC_GETWOR£  returns 
to  VIRTUAL_PREEMPT_HANDLER,  the  APT  is  unlocked  and  a 
virtual  Interrupt  return  is  executed.  This  return  is  simply 
a  jump  to  the  point  in  the  hardware  preempt  handler  where 
tne  virtual  interrupts  are  unmasked.  This  effects  a  virtual 
interrupt  return  instruction. 

5.  Remaining  Procedures 

The  remaining  two  procedures  in  tne  Traffic 
Controller  module  represent  the  extended  instructions: 
PROCESS_CLASS  and  GET_DBR_nUMBER  .  Both  procedures  lock  the 
Active  Process  Table  and  call  RUNNING_VP  to  determine  which 
virtual  processor  is  executing  tne  current  process.  Tr.e 
process  ID  (viz.,  APT  entry  Number)  is  then  extracted  from 
the  running  list.  PROCESS  CLASS  reads  and  returns  the 
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number  provided  by  procedure  GBT_DBR_NUMBER  is  only  valid 
while  the  APT  is  locked.  Particularly ,  in  the  current  SASS 
implementation,  tne  Segment  Manager  invokes  GET_PEP_NUMBER 
and  then  passes  the  obtained  DEP.  number  to  the  Distributed 
Memory  Manager  for  utilization  at  that  level.  In  a  more 
general  situation,  the  process  associated  with  the  DBR 
number  may  nave  been  unloaded  before  the  DPR  number  was 
utilized,  thus  making  it  invalid.  This  problem  does  not 
arise  in  SASS  as  ail  processes  remain  loaded  for  the  life  of 
the  system. 

C.  DISTRIBUTED  MEMORY  MANAGER  MODULE 

The  Distributed  Memory  Manager  module  provides  an 
interface  between  the  Segment  Manager  and  tne  Memory  Manager 
process,  manipulates  event  data  in  the  Global  Active  Segment 
Table  (G_AST) ,  and  dynamically  allocates  available  memory.  A 
detailed  description  of  tne  Distributed  Memory  Manager 
interface  to  the  Memory  Manager  process  was  presented  by 
Wells  [6],  The  remaining  extended  instruction  set  is 
discussed  in  detail  below.  The  complete  PLZ/ASM  source 
listings  for  the  Distributed  Memory  Manager  module  is 
provided  in  Appendix  C. 

1 .  MM  Read  Eventcount 

MM_READ_EVENTCOUNT  is  invoked  by  the  Event  Manager 
and  tne  Traffic  Controller  to  obtain  tne  current  value  of 
the  eventcount  associated  with  a  particular  event.  The  input 
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parameters  to  this  procedure  are  a  segment  nandie  pointer 
and  an  instance  (event  Number),  which  together  uniquely 
identify  a  particular  event. 


The  G_AST  is  locked  and  the  entry  offset  of  tne 
segment  into  the  G_AST  is  obtained  from  the  segment's 
handle.  The  Instance  parameter  is  then  validated  to 
determine  which  eventcount  is  to  be  read.  If  an  invalid 
instance  is  specified,  control  is  returned  to  the  caller 
specifying  an  error  condition.  Otherwise,  the  current  value 
of  the  specified  eventcount  is  read.  The  G_aST  Is  then 
unlocked,  and  the  current  eventcount  value  is  returned  to 
tne  caller. 

2.  Advance 

MM_ADVANCE  is  invoked  by  the  Traffic  Controller  to 
reflect  the  occurrence  of  some  event.  The  input  parameters 
to  MM_ADVANCE  are  a  pointer  to  a  segment's  handle  and  a 
particular  instance  (event  number). 

The  Global  Active  Segment  Table  is  locked  to  prevent 
a  race  condition,  and  the  offset  of  the  segment's  entry  into 
tne  G_AST  is  obtained  from  the  segment  handle.  The  instance 
parameter  is  then  validated  to  determine  which  eventcount  is 
to  be  advanced.  If  an  invalid  instance  is  specified,  an 
error  condition  is  returned  to  the  caller  and  no  data 
entries  are  affected.  If  the  instance  value  is  valid,  the 
appropriate  eventcount  is  incremented,  and  its  new  value  is 


returned 


3.  MM  Ticaet 


MM_TICKET  is  invoiced  by  the  Event  Manager  to  obtain 
tne  current  value  of  tne  sequencer  associated  with  a 
specified  segment.  Tne  input  parameter  to  MM_T  ICKET  is  a 
pointer  to  a  segment's  handle. 

Initially,  MM_TICEET  locirs  tne  Global  Active  Segment 
Table  to  prevent  a  race  condition.  Next  the  offset  of  the 
segment's  entry  into  tne  G_AST  is  obtained  from  tne  segment 
nandle.  Tne  current  value  of  the  sequencer  for  tne  specified 
segment  is  tnen  read  and  saved  as  a  return  parameter  to  tne 


caller.  Tne 

sequencer 

value 

is 

then 

in 

cremented 

in 

anticipation 

of  tne 

next  ticket 

reques 

t . 

Once  tnis 

is 

complete,  tne 

G_AST  is 

uni  oclced 

and 

control 

is 

returned 

to 

tne  caller. 

4.  MM  Allocate 

Tne  MM_ALL0CAT2  procedure  provided  in  this 
implementation  is  a  stub  of  tne  MM_ALIOCATE  described  in  tne 
Memory  Manager  design  of  Moore  and  Gary  L4]  . 

Tne  primary  function  of  MM_ALLOCATE  is  tne  dynamic 
allocation  of  fixed  size  biocics  of  available  memory  space. 


It  is 

invoiced 

in  tne 

current  implementation 

by 

tne 

ini tia 

lization 

routines 

in  B00TSTRAP_ LOADER  and  TC_ 

INI? 

for 

tne  ai 

location 

of  memory 

space  used  in  tne  creation 

of 

tne 

Kernel 

domain 

and  Supervisor  domain  staci  segments 

and 

tne 

creation  of  tne  Known  Segment  Tables  for  user  processes. 
Dynamic  reallocation  of  previously  used  memory  space  (viz., 
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garbage  collection)  is  not  provided  by  tne  MM_AILOCATS  stub 
in  tnis  implementation.  Ail  memory  allocation  required  in 
tnis  implementation  is  for  segments  supporting  system 
processes  tnat  remain  active,  and  tnus  allocated,  for  tne 
entire  life  of  tne  system.  Memory  is  allocated  in  blocks  of 
256  (decimal)  bytes  of  processor  local  memory  (or-board 
RAM).  In  tnis  stub  allocatable  memory  is  declared  at  compile 
time  by  a  data  structure  (MEM_POOL)  tnat  is  accessible  only 
by  mm_ALLOCATE. 

Tne  input  parameter  to  MM_ALLOCATE  is  tne  number  of 
blocks  of  requested  memory.  Tnis  parameter  is  converted  from 
a  block  size  to  tne  actual  number  of  bytes  requested.  Tnis 
computation  is  made  simple  since  memory  is  allocated  in 
powers  of  two.  Tne  byte  size  is  obtained  by  logically 
snirtine  left  tne  input  parameter  eigfct  times,  wnere  eignt 
is  tne  power  of  two  desired  (viz.,  256).  Once  tne  size  of 
the  reauested  memory  is  computed,  it  is  necessary  to 
determine  tne  starting  address  of  tne  memory  blocK(s)  to  be 
allocated.  To  assist  in  tnis  computation,  a  variable 
(N£XT_BLOC£)  is  used  to  keep  track  of  tne  next  available 
block  of  memory  in  MEM_POOL.  NEXT_BLOCK,  wnicn  is 
initialized  as  zero,  provides  tne  offset  into  tne  memory 
being  allocated.  Once  tne  starting  address  is  obtained,  tne 
pnysical  size  of  tne  memory  allocated  is  added  to  NEXT_2ICCK 
so  tnat  tne  next  request  for  memory  allocation  will  begin  at 
tne  next  free  byte  of  memory  in  MEM_P00L.  This  new  value  of 
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N£XT_BLOCK  is  saved  and  tne  starting  address  of  tne  memory 
for  tnis  request  is  returned  to  tae  caller. 

D.  GATE  KEEPER  MODULES 

The  S ASS  Gate  Keeper  provides  tae  logical  boundary 
between  tne  Supervisor  and  tne  Kernel  and  isolates  tne 
Kernel  from  the  system  users,  tnus  malting  it  tamperproof. 
Tais  is  accomplisned  by  means  of  tne  nardvare  system/normal 
mode  and  the  software  ring-crossing  mechanism  provided  by 
tne  Gate  Keeper.  Tne  Gate  Keeper  is  comprised  of  two 
separate  modules:  l)  tne  USER_GATE  module,  and  2)  tne 
KERNEL_GATE_ KEEPER  module.  Tnese  modules  are  disjoint,  witn 
tne  US£R_GATE  module  residing  in  the  Supervisor  domain  and 
tne  KERNEL_GATE_KEEPER  module  residing  in  tne  Kernel  domain. 
It  is  important  to  note  that  the  USER_GATE  is  a  separately 
United  component  in  tne  Supervisor  domain  and  is  not  United 
to  the  Kernel.  The  only  taing  in  common  between  tnese  two 
modules  is  a  set  of  constants  identifying  tne  valid  extended 
instruction  set  which  tne  Kernel  provides  to  tne  users. 

The  Gate  Keeper  modules  presented  in  tnis  implenemtation 
are  only  stubs  as  they  do  not  provide  ail  of  the  functions 
required  of  the  Gate  Keeper.  However,  the  only  tasic  not 
provided  in  this  implementation  is  tne  validation  of 
parameters  passed  from  the  Supervisor  to  the  Kernel.  A 
detailed  description  of  tnis  parameter  validation  design  is 
provided  by  Coleman  13]  .  In  the  process  management 
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demonstration,  tne  Supervisor  stubs  are  written  in  PLZ/ASM 
with  all  parameters  passed  by  CPU  registers.  A  detailed 
description  of  the  Gate  Keeper  modules  and  the  nature  cf 
their  Interfaces  is  presented  below.  The  PLZ/ASM  source 
listings  for  the  two  Gate  Keeper  modules  are  provided  in 
Appendix  C. 

1 .  User  Gate  Module 

The  USER_GATE  module  provides  the  interface 
structure  between  tne  user  processes  in  tne  Supervisor 
domain  and  the  Kernel.  The  TJSER_GATE  is  comprised  of  ten 
procedures  (viz.,  entry  points)  that  correlate  on  a  one  to 
one  basis  with  the  ten  "user  visible"  extended  instructions 
(listed  in  figure  6)  provided  by  the  Kernel.  The  only  action 
performed  by  each  of  these  procedures  is  tne  execution  of 
the  "system  call"  instruction  (SC)  with  a  constant  value. 
Identifying  the  particular  extended  instruction  invoiced,  as 
the  source  operand. 

The  SC  instruction  is  a  system  trap  tnat  forces  tne 
hardware  into  the  system  mode  (Kernel  domain)  and  loads 
register  15  with  tne  system  stack  pointer  (Kernel  domain 
stack).  The  current  instruction  counter  value  (IC)  is  pushed 
onto  tne  Kernel  stack  along  with  tne  current  CPU  flag 
control  word  (FCW).  In  addition,  the  system  trap  instruction 
is  pushed  onto  tne  Kernel  stack  witn  tne  upper  byte 
representing  the  SC  instruction  and  the  lower  byte 


representing  tne  SC  Instruction's  source  operand  (viz.. 


tne 


Kernel  extended  instruction  code).  Together,  these 
operations  form  an  Interrupt  return  ( IRET )  frane  as 
Illustrated  in  figure  9.  Once  tnis  is  complete,  tne  i'CW  is 
loaded  with  tne  FC 'll  value  found  in  tne  System  Call  frame  of 
the  Program  Status  Area  (viz.,  tne  hardware  "interrupt 
vector").  Tne  structure  of  tne  Program  Status  Area  is 
illustrated  in  figure  12.  Tne  instruction  counter  is  tnen 
loaded  witn  the  address  of  tne  SC  instruction  trap  nandier. 
This  value  is  also  located  in  tne  SC  frame  of  the  Program 
Status  Area. 

2.  Kernel  Gate  Keeper  Module 

The  system  trap  nandier  for  the  System  Call 
instruction  is  the  KERNEL_GATE_KEEPER .  The  address  of  tne 
KERN EL_GATE_ KEEPER  and  the  Kernel  FCW  value  are  placed  in 
the  System  Call  frame  of  the  Program  Status  Area  by  the 
BOOTS TRAP _LOADER  module  during  initialization.  The 
KERNEL_GATE_KEEPER  fetches  the  extended  instruction  code 
from  tne  trap  instruction  entry  in  the  IRET  frame  on  the 
Kernel  stack.  This  value  is  then  decoded  oy  a  "case" 
statement  to  determine  which  extended  instruction  is  to  be 
executed.  If  the  extended  instruction  code  is  valid,  the 
appropriate  Kernel  procedure  is  invoked.  Otherwise,  an  error 
condition  is  set  and  no  Kernel  procedures  are  not  invoked. 
Once  control  returns  to  tne  KERNEI_GATE_KEEPER ,  tne  CPU 
registers  and  normal  stack  pointer  (NSP)  value  are  pushed 
onto  the  Kernel  stack  in  preparation  for  return  to  the 
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Unimpiemer ted  ! 

Instruction  ! 

Trap  ! 

C  i 

i- 

1 

1 

Privileged  ! 

Instruction  ! 

Trap  ! 

Kernel  FCW  ! 

! System 

•  — .—.r* ^  »  \ 

1 

1 

1 

1 

Kernel  Gate  Keeper  | 
Address 

l  La  1 1 

' Instruction 

1 

1 

ID  i  “ 

1 
\ 

1 

1 

OM  1  _ 

Segment  ! 

Trap  ! 

\J  1 

1 

1 

1 

1 

•J  A  1  - 

Non-MasJta  tie  ! 

Interrupt  ! 

— ' Hardware 
! Preempt 

•C  | 

1 

1 

Kernel  FCW  ! 

! PRYS_PEEEMPT_HANrrER j 
!  Address  ! 

26  ! - ! 

!  Vectored  Int  ! 
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NOTE:  Offsets  represent  Program  Status  Area  structure 
for  non-s egmented  microprocessor. 


Figure  12.  Program  Status  Area 
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Supervisor  domain.  It  is  noted  tnat  this  operation  would 
normally  occur  immediately  upon  entry  into  tne 
KERNEL_GATE_KEEPER .  In  this  implementation,  nowever, 
parameter  validation  is  not  accomplished  and  the  CPU 
registers  are  used  to  pass  parameters  to  and  from  the  Kernel 
only  for  use  by  the  process  manaeement  demonstration.  In  an 
actual  SASS  environment,  ail  parameters  would  be  passed  in  a 
separate  argument  list  and  the  CPU  registers  would  appear 
exactly  the  same  upon  leaving  the  Kernel  as  they  did  upon 
entering  the  Kernel.  This  is  important  to  insure  that  no 
data  or  information  is  leaked  from  the  Kernel  by  means  of 
the  CPU  registers. 

Control  is  returned  to  tne  Supervisor  by  means  of  tne 
return  mechanism  in  the  hardware  preempt  handier.  This 
mecnanism  is  utilized  to  preclude  tne  necessity  of  building 
a  separate  mechanism  for  tne  KERNEI_GATE_ KEEPER  that  would 
actually  perform  tne  very  same  function.  To  accompiisn  this, 
the  KERNEL_GATE_KEEPER  executes  an  unconditional  Jump  to  the 
PREEMPT_RET  label  In  PHY S_PREEMPT_HANDLER .  This  "jump"  to 
the  hardware  preempt  handler  represents  a  "virtual  IRE?" 
instruction  providing  tne  same  function  as  tne  virtual 
interrupt  return  described  in  the  discussion  of  the  virtual 
preempt  nandler.  At  tnis  point,  tne  virtual  preempt 
interrupts  are  unmasked,  the  normal  stack  pointer  and  CPU 
registers  are  restored  from  the  stack,  and  control  is 
returned  to  the  Supervisor  by  execution  of  the  IRET 
instruction. 
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S.  SUMMARY 


Tne  implementation  of  process  management  funciions  for 
tne  SASS  nas  been  presented  in  tnls  cnapter.  Tne 
implementation  was  discussed  in  terms  of  the  Event  Manager, 
Traffic  Controller,  Distributee  Memory  Manager,  and  Gate 
Keeper  modules. 

Cnapter  V  will  present  tne  conclusions  drawn  from  tnis 
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The  implementation  of  process  management  for  the 
security  Kernel  of  a  secure  arcnival  storage  system  nas  ceen 
presented.  The  process  management  functions  presented 
provide  a  logical  and  efficient  means  of  process  creation, 
control,  and  scheduling.  In  addition,  a  simple  but  effective 
mechanism  for  inter-process  communication,  based  on  tne 
eventcount  and  sequencer  primitives,  was  created.  Work  was 
also  completed  in  tne  area  of  Kernel  database  initialization 
and  a  Gate  Keeper  stub  to  allow  for  dual  domain  operation. 

Tne  design  for  this  implementation  was  based  on  tne 
Zilog  Z8001  sixteen  bit  segmented  microprocessor  [l?J  used 
in  conjunction  witn  tne  Zilog  Z8010  Memory  management  Unit 
[181.  The  actual  implementation  of  process  management  for 
the  SASS  was  conducted  on  the  Advanced  micro  Computers 
Am^ti/4116  MonoBoard  Computer  Tiyl  featuring  tne  AmZ8002 
sixteen  bit  non-segmented  microprocessor.  Segmentation 
hardware  was  simulated  by  a  software  Memory  Management  Unit 
Image . 

This  implementation  was  effected  specifically  to  support 
tne  Secure  Archival  Storage  System  (SASS)  I2lj.  However,  tne 
implementation  is  based  on  a  family  of  Operating  Systems  [lj 
designed  witn  a  primary  goal  of  providing  multilevel 
information  security.  Tne  loop  free  modular  design  utilized 
in  this  implementation  easily  facilitates  any  required 
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expansion  or  modification  for  otner  family  renters.  In 
addition,  tnis  implementation  fully  supports  a 
multiprocessor  design.  Wnile  tne  process  management 
implementation  appears  to  perform  correctly,  it  ftas  not  been 
subjected  to  a  formal  test  plan.  Sncn  a  test  plan  snould  be 
developed  and  implemented  before  Kernel  verification  is 
begun . 

A.  FOLLOW  ON  WORK 

Tftere  are  several  possible  areas  in  tne  SASS  design  tnat 
would  be  Immediately  suitable  for  continued  research.  In  tne 
area  of  nardware,  tnis  includes,  tne  es ta bli snment  of  a 
multiprocessor  environment,  hardware  initialization,  and 
interfacing  to  tne  nost  computers  and  secondary  storage. 
Further  work:  in  tne  Kernel  includes  tne  actual 
implementation  of  the  memory  manager  process,  and  the 
refinement  of  tne  Gate  Keeper  and  Kernel  intiali zation 
structures.  The  implementation  of  tne  Supervisor  nas  not 
teen  addressed  to  date.  Its  areas  of  research  include  tne 
implementation  of  tne  File  Manager  and  Input/Cutput 
processes,  and  tne  final  design  and  implementation  of  tne 
S ASS-Hosts  protocols. 

Otner  areas  tnat  could  also  prove  interesting  in 
relation  to  tne  SASS  include  tne  implementation  of  dynamic 
memory  management,  tne  support  of  multilevel  nosts,  dynamic 
process  creation  and  deletion,  and  tne  provision  of 
constructive  work  to  be  performed  by  tne  Idle  process. 


APPENDIX  A  -  EVENT  MANAGER  LISTINGS 


ZS00PAS  M  2.02 
LOC  OSJ  CODE 


STMT  SOURCE  STATEMENT 


HISTON  $TTY 
EVENT  MGR 


MODULE 


CONSTANT 

TRUE 

FALSE 

READ  ACCESS 
WRITE  ACCESS 
SUCCEEDED 
SEGMENT  NOT  KNOWN 
ACCESS_C1ASS  NOT_EC 
ACCESS  CLASS~NOT  G£ 
KST_SEG  NO 
NR_OF_KSEGS 
MAX_NO_KST  ENTRIES 
NOT  KNOWN 


T^PE 

H  ARRAY 


ARRAY [3  WORD  J 


KST_REC  RECORD 
rMM_HANDLE  H  ARRAY 

SIZE  WORD 

ACCESS  MODE  BYTE 

IN_C0RE  BYTE 

CLASS  LONG 

M_S EG  NO  SHORT. INTEGER 

ENTPY'nUMSER  SHORT  INTEGER 


EXTERNAL 

MM_T ICKET  PROCEDURE 

MM  READ  EVENTCOUNT  PROCEDURE 
TC~ADVAfiC£  PROCEDURE 

TC  AWAIT  PROCEDURE 

PROCESS  CLASS  PROCEDURE 
CIASS_EC  PROCEDURE 

CLASS  GE  PROCEDURE 

ITC  GET  SEG  PTR  PROCEDURE 
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INTERNAL 


0000 


^SECTION  EM_£ST  DC! 

!  NOTE:  THIS  SECTION  IS  AN  "OVERLAY" 

OR  "FRAME '  USED  TO  DEFINE  THE 
FORMAT  OF  THE  KST .  NO  STORAGE  IS 
ASSIGNED  BUT  RATHER  THE  EST  IS 
STORED  IN  A  SEPARATELY  OBTAINED 
AREA.  (A  SEGMENT  SET  ASIDE  FOR  IT)! 

$A3S  0 

KST  ARRAY [MAX_NO_KST_ENTP IES  KST_RECJ 
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GLOBAL 

SSECTION  EM  GLB  PROC 


0000 


READ  PROCEDURE 

f  WWW  *»*?**»*»  wwww  J**l 

*  READS  SPECIFIED  EV ENTCOUNT  * 

*  AND  RETURNS  IT'S  VALUE  TO  * 

*  THE  CALLER  * 

*  PARAMETERS:  v 

*  Rl:  SEGMENT  #  * 

*  R2 :  INSTANCE  * 

«  W  VW  W  WV  W  WVS*  VW  V«l|<v>79? 

5)1  RETURNS:  * 

*  R0:  SUCCESS  CODE  * 

*  RR4 :  EVENTCOUNT  * 

WWWWWWWW*WMWWW9VW  I 


ENTR* 

!  SAVE  INSTANCE  ! 


0000 

93F2 

PUSH 

0R15.  R2 

!  "READ"  ACCESS  REQUIRED  ! 

0002 

2102 

LD 

R2,  #READ_ACCESS 

0004 

0001 

!  GET 

SEG  HANDLE  *.  VERIFY 

ACCESS  ! 

0006 

5F00 

CALL 

CONVERT. AN D_ VERIFY 

!Rl:SEG  n 

0008 

0000  ' 

R2:RH0.  ACCESS 
RETURNS: 

R0  : SUCCESS  CODE 
R 1 : HANDLE  PTR ! 

000A 

0B00 

C*3 

R0 ,  4SUCCEEDED 

000C 

0002 

IF  EQ 

JACCESS  PERMITTED! 

000E 

5E0E 

THEN 

! READ  EVENTCOUNT! 

0010 

001c' 

! RESTORE  INSTANCE! 

0012 

97F2 

POP 

R2 ,  PR 15 

0014 

5F00 

CALL 

MM_R£AD_EV ENTCOUNT 

! Rl : HPTR 

0016 

0000* 

R2:  INSTANCE 
RETURNS : 

R0 : SUCCESS  CODE 
RR4:EVENTC0UNT! 


0018 

001A 

5E08 

001E' 

ELSE 

!REST0RE  SP! 

001C 

97F2 

POP 

FI 

R2 1  0R15 

001S 

0020 

9E08 

RET 

END  READ 
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Kfl 


fPT  TV 


4  m»* 


-•»  w  * 


0020 


TICKET  PP.CCEDURE 

I  awiwiwipw W* WWWWV* WWW VWW 

»  RETURNS  CURRENT  VALUE  OF  * 

*  TICKET  TO  CALLER  AND  INCRE-  * 

*  I* ENTS  SEQUENCER  FOR  NEXT  * 

*  TICKET  OPERATION  * 

?WW  WWWW«9W>i<  W  W*WW*W* 

*  PARAMETERS:  * 

*  Ri:  SEGMENT  #  * 

*  RETURNS:  * 

*  R0 :  SUCCESS  CODE  * 

*  RR4 :  TICKET  VALUE  * 

WWW  WV W* *WW W#* WW»  WWV  ! 

ENTRY 

!  GET  SEC-  HANDLE  <5,  VERIFY  ACCESS  ! 

!  "WRITE"  ACCESS  REQUIRED  ! 

0020  2102  LD  R2 ,  #WRITE_ACCESS 

0022  00ee 

0024  5F00  CALL  CONVERT_AND_ VERIFY  !R1:SEG  # 

002b  0000  ' 

R2:ACCSSS  RFC 
RETURNS  : 

R0 : SUCCESS  COD 
Rl  .'HANDLE  PTR ! 

0028  0E00  CP  R0 '  ^SUCCEEDED 

002A  0002 

IF  EQ  JACCBSS  PERMITTED! 

0fc2C  5E0E  THEN  !  GET  TICKET  ! 

002E  0038  * 

0030  5F00  CALL  MM  TICKET  !R1 :HANDLE  PTR 

0032  eeee* 

RETURNS  : 

RR4  :TICKET! 

!  RSTORE  SUCCESS  CODE  ! 

0034  2100  LD  P.0 1  ^SUCCEEDED 

0036  0002 

FI 

0038  9Eee  RET 
003A  END  TICKET 


003A  AWAIT  PROCEDURE 

*  CURRENT  EVENTCOUNT  VALUE  IS  * 

*  COMPARED  TO  USER  SPECIFIED  * 

*  VALUE.  II  USER  VALUE  IS  * 

*  GREATER  THAN  CURRENT  EVENT-  * 

*  COUNT  VALUE  THEN  PROCESS  IS  * 

*  "BLOCKED"  UNTIL  THE  DESIRED  * 

*  EVENT  OCCURS  .  * 

wvwvvyvvvirvvwvm*  wwwww 


* 

PARAMETERS: 

* 

* 

HI:  SEGMENT  # 

* 

* 

R2:  INSTANCE  (EVENT  *) 

RR4 :  SPECIFIED  VALUE 

* 

*  ap  s?  tf  i*  *  ajt J*  *  DC  V  «  jgt*c  41  «  *  *  «  «  99  W  tt  *t  *  * 

V 

RETURNS: 

* 

R0:  SUCCESS  CODE 

* 

003A  91E4 

003C  9312 

003E  2102 

ee40  0001 

0042  5F00 
0044  0000' 


0046  0B00 
0048  0002 

004A  5E0E 
004C  005A ' 

004E  97F2 

0060  95F4 
0052  5F00 
0054  0000** 


ENTRY 

!  SAVE  DESIRED  EVENTCOUNT  VALUE  ! 

PUSH!  0P.15,  RR4 
!  SAVE  INSTANCE  ! 

PUSH  0R15,  R2 
!  "READ”  ACCESS  REQUIRED  ! 

LD  R2 ,  #READ_ACC2SS 

!  GET  SEG  HANDLE  &  VERIFY  ACCESS  f 

call  convert  jind_verift  ’.ruseg  # 

R2  :ACCESS  F.E Q 
RETURNS: 

R0  :SUCCESS  CODS 
R1 : HANDLE  PTR! 

C?  R0 ,  ^SUCCEEDED 

IF  EC  !  ACCESS  PERMITTED  » 

THEN  !  AWAIT  EVENT  OCCURRENCE  » 

!  RESTORE  INSTANCE  ! 

POP  R2 ,  PR15 

J  RESTORE  SPECIFIED  VALUE  l 
POPL  RR4,  (?R13 

CALL  TC_AWAIT  !R1 ’.HANDLE  PTR 

R2: INSTANCE 
RR4:  VALUE 
RETURNS: 

30  :SUCCESS  CODS’ 
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•aw 


I 


ELSE  !  RESTORE  STACK 


0056  5E08 
04558  005E 
005A  95F4  POP!  RR4,  8R15 

005C  97F2  POP  P.2,  0R15 

FI 

005E  9E08  RET 
0060  END  AWAIT 
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ADVANCE  procedure 

I  V WWW **tri*>* 

'*  signals  the  occurrence  of  * 

*  SOME  EVENT.  EVENTCOUNT  IS  * 

^  INCREMENTED  AND  THE  TRAFFIC  * 

*  CONTROLIER  IS  INVOKED  TO  * 

*  AWAKEN  ANT  PROCESS  AWAITING  * 

*  THE  OCCURRENCE.  * 

^j^w*************************** 

*  PARAMETERS:  * 

v  Ri:  SEGMENT  #  * 

*  R2 :  INSTANCE  (EVENT  *0  * 

vwwvwinwwwvwvwwwMv’r**#* 

*  RETURNS:  * 

*  R0:  SUCCESS  CODE  * 

>p*c«c wwwigc***'** WWWWMWW’fWV  J 


69060  93F2 


06)62  2102 
0064  0000 
0066  bF00 
0068  0000' 


006A  0B00 
006C  0002 

006S  5E0E 
0070  007C ' 

0072  97F2 

0074  bF00 
0076  0000** 


0078  5E08 
007 A  007E' 
007C  9?F2 

007 E  9S08 
0080 


ENTRY 

!  SAVE  INSTANCE  ! 

PUSH  0R15,  R2 

!  GET  SEG  HANDLE  &  VERIFY  ACCESS  ! 

!  "WRITE"  ACCESS  REQUIRED  ! 

LD  R2,  #WRITE_ACCESS 

CALL  CONVERT_AND_VERIFY  !R1:SEG  # 


R0 ,  ^SUCCEEDED 


R2 .-ACCESS  REC 
RETURNS: 

R0  rSUCCESS  CODE 
Rl: HANDLE  PTP! 


IF  SQ  !  ACCESS  PERMITTED  ! 

THEN  !  ADVANCED  EVENTCOUNT  ! 

!  RESTORE  INSTANCE  ! 

POP  R2,  <?Rlb 

CALL  TC_ADV ANCE  !R1:HANELE  PTR 

R2: INSTANCE 
RETURNS : 

R0  :SUCCESS  CODE! 
ELSE  'RESTORE  STACK! 

POP  R2.  9R15 
FI 
HET 

END  ADVANCE 


-«*>■ 


INTERNAL 

$S ACTION  EM_lNT_PP.OC 

0000  ccnvert_anc_verify  procedure 

{  ijtMVWVVVVVVVVMVVVVV 

*  CONVERTS  SEGMENT  NUMBER  TO  KST  INDEX* 

*  AND  EXTRACTS  SEGMENT'S  HANDLE  IRQ*  * 

*  1ST.  IF  SUCCESSFUL,  THEN  ACCESS  * 

*  CLASS  OF  SUBJECT  IS  CHECKED  AGAINST  * 

*  ACCESS  CLASS  OF  OBJECT  TO  INSURE  * 

9  THAT  ACCESS  IS  PERMITTED.  * 

9  ¥  *  *  *  m  m  rn  9  V  9  9  9  99  9  99  **  *  9  *  *  *  *«  *  *  «  99  **  * age* 

*  PARAMETERS:  * 

*  Ri:  SEGMENT  NUMBER  » 

*  R2 :  ACCESS  REQUESTED  * 

y«v«««*K***«**v**Wf«v*Vf«*y*f*»fv*«yy 

9  RETURNS:  * 

9  R0 :  SUCCESS  CODE  * 

*  Rl:  HANDLE  POINTER  * 

999999999999999999999999999999999999999  { 

ENTRY 

!  SAVE  REQUESTED  ACCESS  ! 

3000  93F2  PUSH  ©R15,  R2 

!  GET  SEGMENT  HANDLE  ! 

0002  5F00  CALL  GET_HANDLE  !R1:SEG  * 

0004  0062 ' 

RETURNS : 

R0 : SUCCESS  CODE 
R4 :HANDLE  PTR 
R5: CLASS  PTR! 

0006  0B00  CP  R0 ,  #SUCCEEDED 

0008  0002 

IF  EO  !  SEGMENT  IS  KNOWN  ! 

000A  5E0E  THEN  !  VERIFY  ACCESS  ! 

000C  005E  ' 

!  SAVE  HANDLE  &  CLASS  PTR  ! 

000E  91F4  PUS HL  9R15,  RR4 

!  GET  SUBJECT'S  SAC  ! 

0010  5F00  CALL  PROCESS  CLASS  ! RETURNS: 

0012  0000* 

RR2:PR0C  CLASS! 

!  RETRIEVE  SEG  CLASS  POINTER  ! 

0014  95F0  POPL  RR0,  PR15 

!  GET  SEGMENT'S  CLASS  ! 

0016  1414  LDL  RR4,  0R1 

!  RETRIEVE  REQUESTED  ACCESS  ! 

0018  97F1  POP  »1,  PR15 

!  SAVE  HANDLE  POINTER  ! 

001A  93F0  PUSH  PR  15,  R0 

!  CHECK  ACCESS  CLEARANCE  ! 


Ill 


001C 

001E 

0B01 

0000 

CP  Rl 

IF  EQ  ! 

0020 

0022 

5E0E 

0040' 

THEN 

0024 

0026 

5F00 

0000* 

CALL 

0028 

0B01 

CP 

002A 

0000 

IF  EO 

002C 

5E0E 

THEN 

002E 

0038' 

0030 

2100 

LD 

0032 

0021 

0034 

5E08 

ELSE 

0036 

003C  ' 

0038 

2100 

LD 

003A 

00  e2 

FI 

003C 

5E08 

ELSE  ! 

003E 

0058' 

0040 

5F00 

CALL 

0042 

0000* 

0044 

0046 

0B01 

0000 

CP 

IF  EC 

0048 

004A 

5E0E 

0054' 

THEN 

004C 

004E 

2100 

0029 

LD 

0050 

0052 

5E08 

0058' 

ELSE 

0054 

0056 

2100 

0002 

LD 

FI 

FI 


,  #WRITE_ACCESS 

WRITE  ACCESS  REQUESTED  ! 

CLASS_EQ  fRR2  .‘PROCESS  CLASS 

RR4 rSEGMSNT  CLASS 
RETURNS : 

Rl:  CONDITION  CODE! 

Rl,  #FALSE 

! ACCESS  NOT  PERMITTED! 

R0,  # AC CES S _ CLASS _NOT_EQ 
JACCESS  PERMITTED! 

R0 ,  ^SUCCEEDED 

READ  ACCESS  REQUESTED  ! 

CLASS _GE  !RR2  rPROCESS  CLASS 

RR4 rSEGMENT  CLASS 
RETURNS: 

RlzCONDITION  CODE! 

Rl,  #FALSE 

! ACCESS  NOT  PERMITTED! 

R0 ,  #ACCESS_CLASS_NOT_GE 
! ACCESS  PERMITTED! 

R0,  #SUCCEEDED 


0058  97F1 
005A  5E08 
005C  0060' 

005E  97F2 

0060  9E08 
0062 


!  RETRIEVE  HANDLE  POINTER  ! 
POP  Rl,  9R15 
ELSE 

!  RESTORE  STACK  l 
POP  R2 ,  0R15 
FI 
RET 

END  CONVERT  AND  VERIFY 


£ 
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;e  62 


GET  HANDLE  PROCEDURE 

’*  CONVERTS  SEGMENT  NUMBER  TO  * 


m  £ST  INDEX  AND  DETERMINES  IF  * 

*  SEGMENT  IS  KNOWN.  IF  KNOWN  * 
m  POINTER  TO  SEGMENT  HANDLE  * 

*  AND  POINTER  TO  SEGMENT  CLASS* 

*  ARE  RETURNED.  * 


*  PARAMETERS :  * 

*  Rl:  SEGMENT  NUMBER  * 


m 

RETURNS : 

* 

* 

R0 : 

SUCCESS  CODE 

* 

* 

R4 : 

HANDLE  POINTER 

* 

R5: 

CLASS  POINTER 

* 

WVWVfWVV****** *************  * 


0062  0301 
0064  000A 

0066  2100 
0068  0002 
006 A  0B01 
006C  0000 

006E  5E0A 
0070  007A ' 
0072  2100 
0e74  001C 
0076  5E08 
0078  0086' 
007A  0B01 
007 C  0036 

007E  5E02 
0080  0086' 
0082  2100 
0084  001C 


0086  0B00 
0088  0002 

00SA  5E0E 
008 C  00BE ' 


!  CONVERT  SEGMENT  #  TO  KST  INDEX  # 
SUB  Rl,  #NR_OF_KSEGS 

!  VERIFY  KST  INDEX  ! 

LD  R0 ,  #SUCCEEDED 

CP  Rl,  #0 

IF  LS  ! INDEX  NEGATIVE! 

THEN 

LD  R0 ,  #SEGMENT_NOT_KNOWN 

ELSE  ! INDEX  POSITIVE! 

CP  Rl,  #MAX_N0_5ST_ENTP.IES 

IF  GT  ! EXCEEDS  MAXIMUM  INDEX! 

THEN  ! INVALID  INDEX! 

LD  R0,  #S£GMENT_NOT_KNOWN 

FI 

FI 

CP  R0 ,  #SUCCEEDED 

IF  EO  IINDEX  VALID! 

THEN 

!  SAVE  KST  INDEX  ! 

PUSH  0R15,  Rl 
!  GET  KST  ADDRESS  ! 


008E  93F1 


0090  2101  LD  HI ,  #KST  SEG  NO 

0092  0002 

0094  5T00  CALL  ITC  GET  SEG  PTR  !R1:KST  SEG  NO 

0096  0000* 

RETURNS: 

R0 : AST  ACER! 

!  RETRIEVE  AST  INDEX  #  ! 

0098  97F3  POP  R3,  C«R15 

!  CONVERT  AST  INDEX  #  TO  AST  OFFSET  ! 
009A  1902  MULT  HR2,  #SIZEOF  AST  REC 

009C  0010 

!  COMPUTE  AST  ENTRY  ADDRESS  ! 

009E  8103  ADD  R3,  R0 

!  SEE  IF  SEGMENT  IS  ANOWN  ! 

00A0  4D31  CP  AST.M  SEG  N0(R3),  #NOT  ANOWN 

00A2  000E 
00A4  00FF 

IF  EO  ! SEGMENT  NOT  KNOWN! 

00A6  5E0E  THEN 

00A8  00B2 ' 

00AA  2100  LD  R0,  #S£GMENT  NOT  KNOWN 

00AC  001C 

00AE  5E08  ELSE  ! SEGMENT  ANOWN! 

00B0  00BE ' 

00B2  2100  LD  R0f  #SUCCEEDED 

00B4  0002 

!  GET  HANDLE  POINTER  ! 

00B6  7634  LDA  R4,  AST. MM  HANDLE(R3) 

00B8  0000 

!  GET  CLASS  POINTER  ! 

00BA  7635  LDA  R5,  AST. CLASS (R3) 

00BC  000A 

FI 

FI 

00BE  9E08  RET 
00C0  END  GET_HANDLE 

END  EVENT  MGR 


APPENDIX  B  -  TRAFFIC  CONTROLLER  LISTINGS 
ZS000ASM  2.02 

IOC  OBJ  CODE  STMT  SOURCE  STATEMENT 

$LISTON  $TTY 
TC  MODULE 


CONSTANT 


;  ********  SYSTEM  PARAMETERS  ********  j 

NR  PROP  .  1 


NR  PROC 
VP~NR 

nr'cpu 

nr“kst 


=  4 
=  2 
=  2 
=  54 


"*TO^TK,rsT^  mnsta«s  ««.«. . 


running 

READY 
BLOCKEE 
IDLE  PROC 
NIL 

INYAIXD 
EERNEi  STACK 
USER  STACK 
KST  SEG 

kst“limit 

USER  FCV 
WRITE 


=  0 
=  1 
=  2 

:=  SDDDD 
:=  tFFFF 
=  %EEEE 
=  I 

*  3 
=  2 
=  I 

*  %i60e 
=  0 


! INDICATES  LOWEST  SYSTEM 
SECURITY  CLASS! 

SYSTEM  LOW  ;=  0 

STK_0F?SST  :=  ZTF 

REMOVED  :  =  *ABCD 

TRUE  . =  I 

FALSE  :=  a 

SUCCEEDED  :=  2 


TTPE 
AP  PTR 
VP'PTR 
ADDRESS 
H  ARRAY 


WORD 

WORD 

WORD 

ARRAY  (.3  WORD] 


TABLE  RECORD 
[NEXT  AP 

AP  PTR 

DBR  “ 

WORD 

SAC 

LONG 

PR  I 

Integer 

STATS 

INTEGER 

AFFINITY 

WORD 

YP  ID 

YP  PTR 

HANDLE 

H  ARRAI 

INSTANCE 

WORD 

YALUE 

LONG 

FILL  2 

ARRAY [2 

J 


WORD  J 


RON  ARRAY 

rdy"array 
ap  Data 
*p”data 
TnR  VP 
FIRST 

J 


ARRAY [VP  NR  AP  PTRJ 
ARRAI LNR~CPU  AP~PTRJ 
ARRAY [NR'PROC  AP  TABLEJ 
RECORD 

ARRAU  NR  CPU  WORDJ 
ARRAY [NR“CPU  VP_PTRJ 


EST  RSC 
[MM  HANDLE 
SIZE 
ACCESS 
IN  CORE 
CLASS 
M  SEG  NO 
ENTRY^NUM 

1 


RECORD 

H  ARRAY 

WORD 

BYTE 

BYTE 

LONG 

SHORT  INTEGER 
SHORT” I  NT EGER 


EXTERNAL 

K  LOCK 

PROCEDURE 

i 'unlock 

PROCEDURE 

SET  PREEMPT 

PROCEDURE 

SWAP  VDBR 

PROCEDURE 

IDLE" 

PROCEDURE 

RUNNING  YP 

PROCEDURE 

CREATE  INT  VEC 

PROCEDURE 

LIST  INSERT 

PROCEDURE 

ALLOCATE  MMU 

PROCEDURE 

MM  ALLOCATE 

PROCEDURE 

UPDATE  MMU  IMAGE 

PROCEDURE 

create”stack 

PROCEDURE 

MM  ADVANCE 

PROCEDURE 

mm”read  eyentcount 

PROCEDURE 

G  AST  LOCK 

WORD 

PREEMPT  RET 

LABEL 
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0000 


00A0 

00A2 


0000 


0000 


0000 


$ SECTION  TC  DATA 
INTERNAL 

APT  RECOED 

[  LOCK 

RUNNING  LIST 
READY  LIST 
SLOCKED  LIST 
FILL  6  ~ 

VP 

FILL 

AP 

J 


WORD 

RUN  ARRAY 
RDY_ARKAY 
AP  PTR 
LONG 
VP  DATA 
ARRAY  [4  WORD] 
AP  DATA 


! THESE  VARIABLES  ARE  USED  DURING  TC 
INITIALIZATION  TO  S-PSCIFY  AVAILABLE 
ENTRIES  IN  THE  APT,  AND  ARE  INITIAL¬ 
IZED  BT  TC  IN  IT  IN  THIS  IMPLEMENTATION! 
NEXT_VP  WORD 
APT  ENTRY  WORD 


SSECTION  TC  LOCAL 
$  ABS  0 

! NOTE:  USEE  AS  OVERLAY  ONLY! 
ARG_LIST  RECORD 

[REG  ARRAY [IS  WORDJ 

IC  WORD 


CPU  ID  WORD 
SAC1  LONG 
PR  II  WORD 
USR  STK  WORD 
KER"STK  WORD 
KSTl  LONG 

J 


SABS  0 

! NOTE :  USED  AS  STACK  FRAME  FOR 
STORAGE  OF  TEMPORARY  VARIABLES 
FOR  CREATE  PROCESS.! 

CREATE  "RECORD 
[A?G  PTR  WORD 

DBR~NUM  WORD 

LIMITS  WORD 

SEG  ADDR  ADDRESS 
N  S"P  WORD 

J 


SABS  0 

HANDLE  VAL  RECORD 
[HlGE  LONG 
LOW  WORD 

] 
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!THE  FOLLOWING  DECLARATION  IS  UTILIZED 
*1  AS  A  STACK  FRAME  FOR  STORAGE  OF 

TEMPORARY  VARIABLES  UTILIZED  2V 
TC  ADVANCE  AND  TC  AWAIT.! 

$AES  e 

0000  TEMP  RECORD 


LRANDLE  PTR 

WORD 

EVENT  NR 

WORD 

EVENTUAL 

LONG 

ID  VP" 

WORD 

CPU  NUM 

WORD 

HANDLE  HIGH 

LONG 

HANDLE~LOW 

WORD 

SSECTION  TC  KST  DCL 
! NOTE :  KST~DECLARATI ON  IS  USED  HERE 
TO  SUPPORT  KST  INITIALIZATION  FOR 
THIS  DEMONSTRATION  ONLY.  THIS 
DECLARATION  AND  INITIALIZATION 
SHOULD  EXIST  AT  THE  SEGMENT  MANAGER 
LEVEL  AND  THUS  SHOULD  BE  REMOVED 
UPON  IMPLEMENTATION  OF  SYSTEM 
INITIALIZATION.  ! 

$ABS  0 

0000  KST  ARRAY [NR  KST  KST  RECJ 


y 


$S  ECT ION  TC  INT  PROC 

0000  TC_G£TWOR£  "  PROCEDURE 

*  PROVIDES  GENERAL  MANAGE-  * 

*  MENT  Of  USER  PROCESSES  BY  * 

*  EFFECTING  PROCESS  SCEEDU-  * 

*  LING  ON  VIRTUAL  PROCESSORS* 

9  JJtsp  V  9  V*  V  *  V  W  V*  **  V  *  0«  V* 

*  PARAMETERS:  * 

*  HI :  CURRENT  VP  ID  * 

*  R3 :  LOGICAL  CPU  #  * 

WV  a** 

*  LOCAL  VARIABLES:  * 

*  R2:  NEXT  READY  PROCESS  * 

*  R4 :  AP  FTR  * 


0000  6132 
0002  0006 ' 


0004  0B02 
0006  FFFF 
0008  5E0E 
000 A  0010' 
000C  5E08 
000E  0026' 

0010  4D21 
0012  002A  ' 
0014  0001 
0016  5E0E 
0018  001E ' 
001A  5E08 
001C  0026' 


001E  6124 
0020  0020' 
0022  A142 
0024  E8EF 
0026  0B02 
0028  FFFF 
002A  5E0E 
002C  003C ' 


ENTRV 

!  FIND  FIRST  READY  PROCESS  ! 

LD  R2 ,  APT.READY_LIST(R3) 

GET_READY  AP: 

DO  “! WHILE  NOT  {END  OF  LIST  OR  READY)! 
CP  R2,  #NIL 

IF  EO  ! NO  READY  PROCESS!  THEN 
EXIT  FROM  GET_READY_AP 
FI 

C?  APT . AP. STATE( R2  )  ,  #READY 


IF  EO  ! PROCESS  READY!  THEN 
EXIT  FROM  GET_READY_AP 
FI 

!  GET  NEXT  AP  FROM  LIST  ! 

LD  R4 ,  APT. AP .NEXT_AP( R2 ) 

LD  R2  f  R4 

OD 

CP  R2,#NIL 

IF  SO  !  IF  NO  PROCESSES  READY  !  TEEN 

!  LOAD  IDLE  PROCESS  ! 

LD  APT.RUNNING_LIST(R1 ) ,  #IDLI_FROC 


002E  4D15 
0030  0002 
0e32  DDDD 


CALL  IDLF 
ELSE 


414334 

43036 

0036 

003A 

5F00 

0000* 

5E06 

0052' 

CALL  IDLF 

ELSE 

!  LOAD  FIRST  READY  A?  ! 

003C 

003E 

6F12 

0002' 

LD 

APT.RUNNIN(J_LIST(R1  )  ,  R2 

0040 

0042 

0044 

4D25 
002A  ' 
0000 

ID 

APT.AP. STATE(R2)  ,  #RUNNING 

0046 

0048 

6F21 
002E  ' 

LD 

APT.AP.VP_ID(R2)  ,  R! 

004A 

004C 

6121 

0022' 

LD 

Rl,  APT.AP.DBR( R2 ) 

004E 

0050 

5F00 

0000* 

CALL 

FI 

SWAP_VDBR  ! (Rl :1)BR ) ! 

0052 

9E08 

RET 

0054 

END  TC 

GETWORI 

2^54  VIRTUAL  PREEMPT_HANDIER  PROCEDURE 

*  LOADS  FIRST  READ?  A?  * 

*  IN  RESPONSE  TO  PREEMPT  * 

*  INTERRUPT  * 


eet>4  7604 
0056  0000' 

005e  5F00 

eebA  eeeev 

005C  5F00 
005E  0000^ 

HI  :VP  ID 
R3:CFU  *! 

!  GET  AP  » 

0060  6112  ID  R2,  APT. RUNNING  IIST(Rl) 
0062  0002' 


0064  0B02 
0066  DDDD 
0068  5E06 
006 A  0072' 
006C  4D25 
006E  002A  ' 
0070  0001 


!  LOAD  FIRST  READ!  PROCESS  ! 

0072  5F00  CALL  TC  GETWORK  !R1:VP  ID 
0074  0000' 

R3:CPU  #! 

-  NOTE :  THIS  IS  THE  INITIAL  POINT  OF 
EXECUTION  FOP  USER  PROCESSES.! 

VIRT  PREEMPT  RETURN: 

!**  CALL  UNLOCK  (APT''. LOCK)  v*  i 

'■**  RETURNS  WHEN  PROCESS  HAS  UNLOCKED  AP'1'  *’! 

'.***  AND  ADVANCED  ON  THIS  EVENT  ** ! 

0076  7604  LDA  R4,  APT. LOCK 

0078  0000' 

007 A  5F00  CALL  K  UNLOCK 

007 c  0000V 


!  IF  NOT  AN  IDLE  PROCESS,  SET  IT  TO  READY  T 
CP  R2,  #IDLi*_ PROC 

IF  NE  !  NOT  IDLE  !  THEN 

ID  APT  .AP  .STATE  (R2  )  ,  *P.£ADT 

FI 


ENTRY 

jvv  CALI  WAIT_L0CK  ( APT" . LOCK  )  v*» 

*.w  RETURNS  WEEN  PROCESS  HAS  LOCKED  APT  ■»’! 
LDA  R4,  APT. LOCK 

CALL  K_L0CK 

!  GET  RUNNING  VP  ID  ! 

CALL  RUNNING'VP  'RETURNS: 
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!  PERFORM  A  VIRTUAL  INTERRUPT  RETURN  ! 
!NOTE:  THIS  JUMP  EFFECTS  A  VIRTUAL 
I RET  INSTRUCTION.! 

007E  5E08  JP  PREEMPT  RET 
0080  0000* 

0082  END  VIRTUAL  PREEMPT  HANDLER 


GLOBAL 

SSECTION  TC  GLB  PROC 

0000  TC_IN IT  ~  “  PROCEDURE 

i  mwvvmwvvvvvvvvovvvwvvvv 

'*  INITIALIZES  APT  HEADER  * 

*  AND  VIRTUAL  INT  VECTOR  * 

W  *f  W  ««  V  W  V  *  **  *  9  V  *  V  V  *  V  *  »*  V  V  *  M  V 

*  PARAMETERS:  * 

*  HI:  CPU  ID  * 

*  R2 :  NR  VP  v 

wvwwwvw  **yyyf***f**M***  » 


0016  2104 

eeie  0000 


ENTRY 

!  NOTE:  THE  NEXT  FOUR  VALUES  ARE 
ONLY  TO  BE  INITIALIZED  ONCE.  * 


0000 

0002 

e004 

4D05 
00A0  ' 
0000 

LD 

NEXT_VP ,  #0 

0006 

0008 

000A 

4D05 
00A2  ' 
0000 

LD 

APT_ENTRY,  #0 

000C 

000E 

0010 

4D05 
000A  ' 
FFFF 

LD 

apt.blocked_lis 

0012 

0014 

4D08 

0000' 

CLR 

APT. LOCK 

fWVWWWWWWtfWjptllWttXtWWWVWWUVW 

NOTE:  THE  FOILOWING  CODE  IS  INCLUDED 
ONLY  POP.  SIMULATION  OF  A  MULT IPRO CESSOR 
ENVIRONMENT.  THIS  IS  TO  INSURE  THAT  THE 
READY  LIST (S )  AND  VP  DATA  07  THE  SIMULATED 
CPU(S)  ARE  PROPERLY  INITIALIZED.  IN  AN 
ACTUAL  MULTIPROCESSOR  ENVIRONMENT,  THIS 
BLOCK  OF  CODE  SHOULD  BE  REMOVED . 

LD  R4 ,  #0 


001 A  0B04 
001C  0004 

001E  5E0E 
0020  0026 ' 
0022  5E08 
0024  0036' 


CP  R4 ,  #NR_CPU*2 

IF  EO  ! ALL  LISTS  INITIALIZED! 
THEN  EXIT 
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!  INITIALIZE  READY  LISTS  AS  EMPTY  ! 
0026  4D45  ID  APT. READY  IIST(R4),  ANIL 

0028  0006' 

002A  FFFF 

!  INITIALLY  MARK  ALL  LOGICAL  CPU'S 
AS  HAVING  1  IV.  THIS  IS  NECESSARY 
TO  INSURE  TC  ADVANCE  WILL  FUNCTION 
PROPERLY,  AS'IT  EXPECTS  EVERY  CPU 
TO  HAVE  AT  LEAST  1  VP.  ! 


002C 

4D45 

LD  APT .  VP  .  NR_VP  (P.4 )  ,  el 

002E 

0010' 

0030 

0001 

0032 

A941 

INC  R4,  *2 

0034 

E8F2 

OD 

!  END  MULTIPROCESSOR  SIMULATION  CODE. 

0036 

6F12 

LD 

APT.VP.NR_VP(R1 ) ,  R2 

0038 

0010' 

003A 

6103 

LD 

R3 ,  NEXT_VP 

003C 

00A0  ' 

003E 

6F13 

LD 

APT . VP . FIRST ( Rl ) ,  R3 

004e 

0014' 

!  RECOMPUTE  NEXT  VP  VALUE  FOR  TC 

INITIALIZATION^  NEXT  LOGICAL 

CPU 

.  ! 

e042 

A125 

LD 

R5,  R2 

0044 

1904 

MULT 

RR4 ,  #2 

0046 

0002 

0048 

8153 

ADD 

R3 ,  RE 

004A 

6F03 

LD 

NEXT_VP,  R3 

004C 

00A0  ' 

!  INITIALIZE  RUNNING  LIST  ! 

004E 

6113 

LD 

R3 ,  APT.VP.FIRST(Bl) 

0050 

0014' 

DO 

0052 

0B02 

CP 

R2,  *0 

0054 

0000 

0056 

5E0E 

IF 

EO  THEN  EXIT  FI 

0058 

005E  ' 

005A 

5E08 

005C 

006A  ' 

0e5E 

4D35 

LD 

APT . RUNNI NG_LIST ( R3  '  .  #IDLE_F3CC 

0060 

0002' 

0062 

DDDD 

0e64 

A931 

INC 

R3,  #2 

0066 

AB20 

DEC 

R2 ,  #1 

006e 

E8F4 

OD 

006A 

4D15 

LD 

APT.READT_LIST( Rl )  ,  #NIL 

006C 

0006' 

006E 

FFFF 
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0070  2101  LD  Rl,  #0 

0072  0e00 

!  ENTRY  ADDRESS  ! 

0074  7602  IDA  R2,  7IRTUAL_ PREEMPT  HANDLER 
0076  00S4  ' 

0078  5F00  CALL  CREATE  INT  VEC 

007 A  0000* 

! Rl : VIRTUAL  INTERRUPT  * 

R2: INTERRUPT  HANDLER  ADDRESS! 

007C  9E08  PET 

007E  END  TC  INIT 


ee?E 


CREATE  PROCESS  PROCEDURE 

*  CREATES  USER  PROCESS  v 

*  DATABASES  AND  APT  * 

*  ENTRIES  * 

VV *  W V 9 VV  V »*V  W V  * V *  **>*  V 9  V 

*  PARAMETERS:  * 

*  R14 :  ARGUMENT  PTR  * 


ENTRY 

! NOTE :  THIS  PROCEDURE  IS  A  STUB  TO  ALLOW 
PROCESS  INITIALIZATION  FOR  THIS 
DEMONSTRATION. ! 

!  ESTABLISH  S TACK  FRAME  FOR  LOCAL 
VARIABLES.  ! 


007E 

030F 

SUB 

R15,  #S IZEOF  CREATE 

0080 

000A 

!  STORE  INPUT  ARGUMENT  POINTER 

0082 

6FFE 

ID 

CREATE. ARG_PTR( R15) »  R14 

0084 

0000 

!  LOCK  APT  ! 

0086 

7604 

LDA 

R4 ,  APT. LOCK 

0088 

0000' 

008A 

5F00 

CALL 

K_LOCK 

008  C 

0000* 

!  RETURNS  WHEN  APT  IS  LOCKED  ! 

!  CREATE  MMU  ENTRY  FOR  PROCESS 

0e8E 

5F00 

CALL 

ALLOCATE_MMU  ’RETURNS: 

0090 

0000» 

R0 :  DBR  * 

!  GET 

NEXT  AVAILABLE  ENTRY  IN  , 

0092 

6101 

LD 

Rl,  APT.ENTRY 

0094 

00A2' 

!  COMFUTE  APT  OFFSET  ! 

0096 

2102 

LD 

R2 ,  #S IZEOF  AP.TABLE 

0098 

0020 

009A 

8112 

ADD 

R2,  Rl 

!  SAVE  NEXT  AVAILABLE  APT  ENTR' 

009C 

6F02 

LD 

APT_ENTRT,  R2 

009E 

00A2  ' 

!  CREATE  APT  ENTRY  FOR  PROCESS 

00A0 

4D15 

LD 

APT. AP. NEXT_AP( Rl ) ,  #NIL 

0eA2 

0020' 

00A4 

FFFF 

00A6 

6F10 

LD 

APT.AP.DBR(Rl),  R0 

00  A8 

0022' 

!  GET 

PROCESS  CLASS  ! 

00AA 

54  E2 

LDL 

RR2,  ARG_LIST .S AC1 (P14 ) 

00AC 

001E 

00AE 

5D12 

LDL 

APT . AP . SAC (Rl ) ,  RR2 
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00B0 

0024' 

!  GET 

PROCESS  PRIORITY  ! 

00B2 

61E2 

LD 

R2 ,  ARG_LIST . PR 1 1 (R 14 ) 

00B4 

0022 

00B6 

6FI2 

LD 

APT.AP.PRKR1 ),  P2 

00158 

0028' 

!  GET 

LOGICAL  CPU  #  ! 

00BA 

61  £2 

LD 

R2,  APG_LIST.CPU,ID(R14) 

00BC 

001C 

00BE 

6F12 

LD 

APT.AP.AFFI NITY (Rl ) ,  R2 

00C0 

002C  ' 

ITHREAD  IN  LIST  AND  MAKE  READ! ! 

00C2 

7623 

LDA 

R3,  APT.READY_LIST(P.2) 

00C4 

0006' 

00C6 

7604 

LDA 

R4,  APT .AP ,NEXT_AP 

00C8 

0020' 

00CA 

7605 

LDA 

R5,  APT.AP.PRI 

eecc 

0028' 

00CE 

7606 

LDA 

R6,  APT. AP. STATE 

00D0 

002A  ' 

00D2 

2107 

LD 

R7,  #READY 

00D4 

0001 

00D6 

AD21 

EX 

Rl,  R2 

!  SAVE  DBR  #  ! 

00D8 

6FF0 

LD 

CREATE. D3R_NUM(R15) ,  R0 

00DA 

0002 

00DC 

5F00 

CALL 

LIST, INSERT 

00DE 

0000V 

!R2:  OBJ  ID 

R3 :  LIST  HEAD  PTR 
P.4:  NEXT  OBJ  PTH 
R5:  PRIORITT  PTR 
R6 :  STATE  PTR 
R7:  STATE! 

!  UNLOCK  APT  ! 

00E0  7604  lda  R4,  apt. lock 

00E2  0000' 

00E4  5F00  CALL  K  UNLOCK 

00E6  0000» 

JCREATE  USER  STACK! 

!  RESTORE  ARGUMENT  POINTER  ! 
00E8  61FE  LD  R14,  CREATE. ARG  PTRfRlbl 
00EA  0000 

00EC  61E3  LD  R3,  ARG  LIST.USR  STK(R14) 

00EE  0024 

!  SAVE  LIMITS  ! 

00F0  6FF3  LD  CREATE. LIMITS (R15  }  ,  R3 

00F2  0ee4 


00F4 

5F00 

CALL 

MM_ ALLOCATE  !R3:  #  OF  BLOCKS 

00F6 

0000* 

RETURNS  r 

R2 :  START  ADER! 

! COMPUTE  &  SAVE  NSP! 

00F8 

A128 

LD 

R6 ,  R2 

!  ESTABLISH  INITIAL  SP  VALUE 

FOR 

USER  STACK.  1 

00FA 

0108 

ADD 

R8 ,  #STK_OFFS£T 

00FC 

00FF 

00FE 

6FF8 

LD 

CREATE. N_S_P(R15) ,  R8 

0100 

0008 

!  RESTORE  LIMITS  ! 

0102 

61F4 

LD 

R4,  CREATE. LIMITS (R15) 

ei04 

0004 

0106 

AB40 

DEC 

R4  ! SEG  LIMITS ! 

!  RESTORE  DBR  ! 

0108 

61F0 

LD 

R0,  CREATE. DBR_NUM(R15) 

010A 

0002 

010C 

2101 

LD 

Rl,  #USER_STACK 

010E 

0003 

0110 

2103 

LD 

R3 ,  # WRITE  ! ATTRIBUTE ! 

0112 

0000 

0114 

5F00 

CALL 

UPDATE_MMU_IMAGE 

0116 

0000* 

! R0 :  DSP.  # 

Hi:  SEGMENT  * 

R2:  SEG  ADDRESS 
R3 :  SEG  ATTRIBUTES 
R4:  SEG  LIMITS! 

! CREATE  KERNEL  STACK! 

1  RESTORE  ARGUMENT  POINTER  ! 


0118 

011A 

61FE 

0000 

LD 

R1A *  CREATE. ARG_ 

PTR (R15 ) 

011C 

eiiE 

61E3 

0026 

LD 

R3,  ARG_LIST . KER 

_STK(R14) 

0120 

0122 

5F00 

0000* 

CALL 

MM_ALLOCAT E  !R3: 

#  OF  BLOCKS 

RETURNS 

R2 :  START  ADCR ! 

!MAKE  MMU  ENTRY! 

!  RESTORE  DBR  #  ! 


0124 

0126 

61F0 

0002 

LD 

R0  , 

CREATE. DBR_NUM(R15) 

0128 

012A 

2101 

0001 

LD 

Rl, 

#KSRNEL_STACK 

012C 

A134 

LD 

R4, 

R3 

012E 

AB40 

DEC 

R4 

0130 

0132 

2103 

0000 

LD 

R3, 

#WRITE 

!  SAVE  START  ADDRESS  ! 

12b 


0134 

6FF2 

LD 

CREATE. SEG_ADDR(R15) ,  R2 

0136 

0006 

0138 

5F00 

CALI 

UPBATE_MMU_IMAGE 

013A 

0000V 

!  R0 :  DER  # 

Rl:  SEGMENT  # 

R2 :  SEG  ADDRESS 

R3:  SEG  ATTRIBUTES 

R4 :  SEG  LIMITS! 

! ESTABLISH  ARGUMENTS  f 
!  RESTORE  ARGUMENT  POINTER  ! 

013C 

61FE 

LD 

R14  ,  CREATE  .ARG_PTR (R15 ) 

013E 

0000 

!  RESTORE  STACK  ADDRESS  ! 

0140 

61F1 

LD 

Rl.  CREATE. SEG_ADDR(R15) 

0142 

0006 

0144 

2103 

LD 

R3,  #USER_FCW 

0146 

1800 

0148 

61E4 

LD 

R4 ,  ARG^LIST . IC (R14 ) 

014A 

001A 

!  RESTORE  INITIAL  NSP  ! 

014C 

61F5 

LD 

R5 ,  CREATE. N_S_P(R15) 

014E 

0008 

0150 

7606 

LDA 

R6 ,  VIRT_PREEMPT_RETURN 

0152 

0076' 

0154 

030F 

SUB 

R15,  #8 

0156 

0008 

0158 

1CF9 

IDM 

(?R1£ ,  R3.  *4 

015A 

0303 

!  load  argument  pointer  for 

CREATE  STACK  CALL  ! 

015C 

A1F0 

LD 

R0  f  R15 

015E 

93F1 

PUSH 

0P.15,  Rl 

0160 

A1E1 

LD 

Rl,  R14 

!  LOAD  INITIAL  REGISTER  VALUES  TO 

BE 

PASSED  TO  USER  PROCESS  AS 

INITIAL  PARAMETERS.  ! 

0162 

5C11 

LDM 

R2,  ARG_LIST.REG  (Rl  ’» ,  #13 

0164 

020C 

0166 

0000 

0168 

97F1 

POP 

Rl,  GR15 

016A 

5F00 

CALL 

CREATE_STACK 

016C 

0000V 

!  R0 :  ARGUMENT  PTR 

Pi:  TOP  OF  STACK 

R2-R14 :  INITIAL 

REG  STATES! 

’NOTE 

:  THE  ABOVE  INITIAL  REG  STATES 

REPRESENT  THE  INITIAL  PARAMETERS 

(VIZ 

. ,  REGISTER  CONTENTS  )  THAT  A 

USER 

PROCESS  WILL  RECEIVE  UPON 
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ei6E  010F 

0170  0008 


INITIAL  EXECUTION.  ! 

ADD  Rib,  #8  ! OV EP.LAY  PARAMETERS ! 


!  ALLOCATE  KST  ! 


0172 

2103 

LD 

R3,  #KST>IMIT 

0174 

0001 

017b 

5F00 

CALL 

MM_ALLOCATE  ? R 3 : #  OF  BLOCKS 

0178 

eeee* 

RETURNS 

R2:START  ADD?! 

!  RESTORE  DBR  ! 

ei?A 

61F0 

LD 

R0 ,  CREATE. DBR_NUM(Rlb> 

017C 

0002 

!  SAVE  KST  ADDRESS  ! 

017E 

6FF2 

LD 

CREATE. SEG_ADD3( R15 ) .  R2 

0180 

0006 

!  make 

MMU  ENTRY  FOR  KST  SEG! 

0182 

2101 

LD 

Rl,  #KST_SEG 

0184 

0002 

0186 

2103 

LD 

R3  ,  # WRITE  !  ATTRIBUTE! 

0188 

0000 

018A 

2104 

LD 

R4,  #KST_LIMIT-1 

018C 

0000 

018E 

5F00 

CALL 

UPDATE_MMU_ IMAGE 

0190 

0000* 

!R0:  DBR  * 

Rl:  SEGMENT  # 

R2 :  SEG  ADDRESS 

R3:  SEG  ATTRIBUTES 

R4 :  SEG  LIMITS! 

!  RESTORE  KST  ADDRESS  ! 

0192 

61F2 

LD 

R2,  CREATE. SEG_ADDR(R15) 

0194 

0006 

!  CREATE  INITIAL  KST  STUB  ! 

0196 

5F00 

CALL 

CREATS_KST  !R2:KST  ADD? ! 

0198 

01A0  * 

!  REMOVE  TEMPORAR1  VARIABLE 

STACK  FRAME.  ! 

el9A 

eieF 

ADD 

Rib,  #S I ZEOF  CREATE 

019C 

000A 

019E 

9E08 

RET 

01A0 

END  CREATE_PROCESS 
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01A0  cpeate_kst  procedure 

f  mvwwmwvmw 

*  CREATES  KST  STUB  FOR  * 

*  PROCESS  MANAGEMENT  * 

*  DEMO.  INSERTS  ROOT  * 

*  ENTRY  IN  KST .  NOT  * 

*  INTENDED  TO  BE  FINAL  * 

*  PRODUCT.  * 

W  *  >K  V  >Mt  *  W  >!>  W  9  W  V  W  V  V 

*  PARAMETERS:  * 

*  R2 :  KST  ADDRESS  * 


ENTRY 

! N OT E :  THIS  PROCEDURE  IS  A  STUB  USED 
FOR  INITIALIZATION  IN  THIS  IMPLEMENTATION 
ONLY.  THE  ACTUAL  INITIALIZATION  CODE 
FOR  THE  KST  WILL  RESIDE  J»T  THE  SEGMENT 
MANAGER  LEVEL  ONCE  IMPLEMENTATION  OF 
STSTEM  INITIALIZATION  IS  EFFECTED.  ! 

!  CREATE  ROOT  ENTRY  IN  KST  ! 

01A0  1406  LDL  RR6 ,  #-l  !ROOT  HANDLE! 

01A2  FFFF 
01A4  FFFF 

01A6  5D26  LDL  KST. MM  HANDLE(R2),  RR6 
01A8  0000 

! SET  ROOT  ENTRY  *  IN  G  AST  ! 

01AA  4D25  LD  KST. MM  HANDLE [2J fR2 ) ,  40 
01AC  0004 
01AE  0000 

!  SET  ROOT  CLASSIFICATION  ! 

01B0  1406  LDL  P.R6 ,  ^SYSTEM  LOW 
0132  0000 
01B4  0000 

01B6  5D26  LDL  KST . CLASS ( R2 )  ,  RR6 
01B8  000A 

'SET  MENTOR  SEG  #! 

01BA  4C25  LDB  KST.M  SEG  N0(R2),  #0 
01BC  020E 
013E  0000 

!  I N IT IALIZ  E  FREE  KST  ENTRIES 
FOR  DEMO.  NOT  FULL  KST! 

01C0  2101  LD  Rl,  #10 
01C2  000A 

DO 

01C4  0301  CP  Rl,  #0 
01C6  0000 

01C8  5E0E  IF  Eg  THEN  EXIT  FI 
01CA  01D0 ' 

01CC  5E08 


1 


01CE  01DE  ' 


01D0 

0102 

ADD 

R2,  #S I ZEOF  KST_REC 

01D2 

0010 

01D4 

4C25 

IDB 

KST . M_S EG_NO( R2  )  ,  # 

0 1D6 

000E 

01D8 

FFFF 

01DA 

AS10 

DEC 

R1 

01DC 

E8F3 

OD 

01DE 

9E08 

RET 

01E0  END  CREATE  EST 
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01E0  TC  advance  procedure 

;  vigiSwwwvwwwwvv ************ 

*  EVENTCOUNT  IS  ADVANCED  PY  * 

*  INVOCATION  OF  MM  ADVANCE.  * 

*  PROCESSES  THAT  ARE  AWAITING  * 

*  THIS  EVENT  OCCURRENCE  ARE  * 

*  REMOVED  FROM  THE  BLOCKED  LIST* 

*  AND  MADE  READY.  THE  READY  * 

*  LISTS  ARE  TEEN  CHECKED  TO  * 

*  INSURE  PROPER  SHEDULING  IS  * 

*  EFFECTED.  IF  NECESSARY  VIR-  * 

*  TTJAL  PREEMPTS  ARE  SENT  TO  ALL* 

*  THOSE  VP'S  BOUND  TO  LOWER  * 

*  PRIORITY  PROCESSES  .  * 

9 «jgi  V vm  V  *  V  V  W  W  V  #  V  V  *  *  W  V  V  W  W  *  V  W 

*  PARAMETERS:  * 

*  Rl:  HANDLE  POINTER  * 

*  R2:  INSTANCE  (EVENT  #)  * 

«  v  *  w  w  v  w  v*  v  &  *r  *«  v  *  *f‘ *  v  v  v  »  v  *r  w  w  m  ** 

*  RETURNS:  * 

*  R0 :  SUCCESS  CODE  * 

WWW? w>? wv w  ? 


01E0  e30F 
01E2  0012 

eiE4  6FF1 
01E6  0000 
01E8  6FF2 
eiEA  0002 

01EC  7604 
01EE  0000' 
01F0  5F00 
01F2  0000* 


01F4  5F00 
01F6  0000* 


01F8  0B00 
01FA  0002 
01FC  5E0E 
01FE  0372' 


ENTRY 

!  ESTABLISH  TEMPORARY  VARIABLE 
STACK  FRAME.  ! 

SUB  R15 .  #SIZEOF  TEMP 

!  SAVE  INPUT  ARGUMENTS  ! 

LD  TEMP.EANDLE_PTR(R15>,  Rl 

LD  TEMP.EVENT_NR(R15) ,  R2 

!  LOCK  APT  ! 

LDA  P.4,  APT. LOCK 

CALL  K_LOCK 

!  RETURNS  WHEN  APT  IS  LOCKED  ! 

!  ANNOUNCE  EVENT  OCCURRENCE  BY 

INCREMENTING  EVENTCOUNT  IN  G  AST! 
CALL  MM_ADVANCE  !R1  .'HANDLE  PTR 

R2 : INSTANCE 
RETURNS  : 
R0:SUCCESS  CODE 
RR2:EVENTC0UNT! 

CP  ..0,  #SUCCEEDED 

IF  EO  THEN 
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!  SAVE  EVFNTCOUNT  ! 


0200 

5DF2 

LDL 

TEMP.EVENT_VAL(R15) ,  RR2 

0202 

0004 

!  RESTORE  INSTANCE  ! 

0204 

61F0 

LD 

R0,  TEMP.EVENT_NR(R16) 

0206 

0002 

!  RESTORE  HANDLE  POINTER  ! 

0208 

eiFi 

LD 

HI.  TEMP.HANDLE_PTR (R15) 

020A 

0000 

!  SAVE  HANDLE  ! 

020C 

5414 

LDL 

RR4,  FANDLE_VAL.HIGH(Rl ) 

020S 

0000 

0210 

5DF4 

LDL 

TEMP .HANDLE_HIGH ( R15 ) ,  RR4 

0212 

000C 

0214 

6114 

LD 

P4 ,  KAN  DLE_VAL . LOW ( Rl ) 

e216 

0004 

0218 

6FF4 

LD 

TEMP . FANDLE_LOW ( R15 ' ,  R4 

021 A 

0010 

!  AWAKEN  ALL  PROCESSES  AWAITING 
THIS  EVENT  OCCURRENCE  ! 

!  GET  FIRST  BLOCKED  PROCESS  ! 


021C 

021E 

6101 
000A  ' 

LD 

Rl. 

APT. BLOCKED _L 1ST 

0220 

0222 

7606 
000A  ' 

LDA 

R6, 

APT.BLOCKED_LIST 

WAKE  UP: 

DO 

!  DETERMINE  IF  AT  END  OF  BLOCKED  LIST 


0224 

0B01 

CP 

Rl,  #NIL 

0226 

FFFF 

IF  EC 

!  NO  MORE  BLOCKED  PROCESSES  ! 

0228 

5E0E 

THEN 

EXIT  FROM  WAKE_UP 

022A 

0230' 

022C 

5E08 

022E 

02B4 ' 

FI 

!  SAVE  NEXT  ITEM  IN  LIST  ! 

0230 

6117 

LD 

R7,  APT.AP.NEXT_AP(R1 ) 

0232 

0020' 

!  DETERMINE  IF  PROCESS  IS  ASSOCIATED 

WITH  CURRENT  HANDLE  ! 

0234 

54F4 

LDL 

RR4,  TEMP.KANDLE_KIGH(R15) 

0236 

000C 

0238 

5014 

CPL 

RR4,  APT. AP. HAN DIE (Rl ) 

0231 

0030' 

IF  EC 

!  HIGH  HANDLE  VALUE  MATCHES! 

023C 

5E0E 

THEN 

023E 

02A2  ' 

0240 

61F4 

LD 

R4 «  TEMP. HANDLE_LOW(Rl 5 ) 

0242 

0010 

0244 

4B14 

CP 

P.4,  APT  .AP  .HANDLE  [2  j  (Rl ) 
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0246 

0034' 

IF  EC  !  HANDLE' 

S  MATCH  ! 

0248 

5E0E 

THEN  !  CHECK  FOR  INSTANCE  MATCH  ! 

024A 

029C  ' 

024C 

61F0 

LD  Re 

,  TEMP. EVENT  NR(R15) 

024E 

0002 

0250 

4B10 

CP  R0 

.  APT 

.AP.INSTANCE(R1 ) 

e252 

0036' 

IF  EQ  ! 

INSTANCE  MATCHES  ! 

0254 

5E0E 

THEN  JDETERmInE  IF  THIS  IS  THE 

0256 

0296' 

OCCURRENCE  THE  PROCESS 

WAITING  FOR  ! 

0258 

54F2 

LDL 

RR2 , 

TEMP.EVENT_VAL(R15) 

025A 

0004 

025C 

5012 

CPL 

RR2, 

APT . AP . VALUE ( Rl ) 

025E 

0038' 

IF  GE 

! AWAITED  EVENT  HAS  OCCURRED 

0260 

5E01 

then 

!  AWAKEN  PROCESS  ! 

0262 

0290' 

!  REMOVE 

FROM  BLOCKED  LIST  ! 

0264 

2F67 

LD 

GR6 

,  R7 

!  SAVE  LOCAL  VARIABLES  ! 

0266 

91F6 

PUSHL  0R15,  RR6 

!  SET 

LIST 

THREADING  ARGUMENTS! 

0268 

6112 

LD 

•  R2, 

APT . AP .AFFINITY ( Rl } 

026A 

002C ' 

026C 

7623 

LEA 

R3, 

APT. READ Y_I IST(R2  ) 

026E 

0006' 

0270 

7604 

LEA 

R4, 

APT .AP ,NEXT_AP 

0272 

0020' 

0274 

7605 

LDA 

F5, 

APT . AP  .PR  I 

0276 

0028  ' 

0278 

7606 

LDA 

R6 , 

APT. AP. STATE 

027A 

002A  ' 

027C 

2107 

LD 

R7, 

WREADI 

027E 

0001 

0280 

A112 

LD 

R2 , 

Rl 

0282 

5F00 

CALL 

LIST  INSERT 

0284 

0000* 

!R2 

:  OBJ 

ID 

P.3:  LIST  HEAD  PTH 
F4:  NEXT  OBJ  PTR 
P5:  PRIORITY  PTR 
R6 :  STATE  PTR 
R7:  STATE  VALUE  ! 

!  RESTORE  LOCAL  VARIABLES  ! 
02B6  95F6  POPL  RR6 .  0R15 

0288  210B  LD  Rll,  ^REMOVED 

028A  AECD 

e28C  5E08  ELSE  JPROCESS  STILL  BLOCKED! 


028E  0292' 

0290  8DB8  CLR  Rll 

FI  !  END  VALUE  CHECK  ! 

0292  5E08  ELSE  IPROCESS  STILL  BLOCKED! 

0294  0298' 

0298  8DB8  CLR  Rll 

FI  !  END  INSTANCE  CHECK  ! 

0298  5E08  ELSE  ’PROCESS  STILL  BLOCKED! 

029 A  029E  ' 

029C  8DB8  CLR  Rll 

FI  !  END  HANDLE  CHECK  ! 

029E  5E08  ELSE  !PROCSSS  STILL  BLOCKED! 

02A0  02A4  ' 

02A2  8DB9  CLR  Rll 

FI  !  END  HIGH  HANDLE  CHECK  ! 

!  RESET  AP  POINTER  REGISTERS  ! 

02A4  0B0B  CP  Rll,  ^REMOVED 

02A6  ABCD 

IF  NE  !  PROCESS  IS  STILL  BLOCKED  ! 

02A8  5E06  THEN 

02AA  02B0 ' 

02AC  7616  LDA  R6,  APT. AP. NEXT  AP(R1) 

02AE  0020' 

FI 

02B0  A171  LD  Rl.  R7 

02B2  E8B8  OD 

!  DETERMINE  IF  ANT  VIRTUAL  PREEMPT 
INTERRUPTS  ARE  REQUIRED  » 

02B4  8D28  CLR  R2 

PREEMPT_CEECK: 

DO 

02B6  0B02  CP  R2,  #NR_CPU  *  2 

02B8  0004 

02BA  5E0E  IF  EC  ! ALL  READY  LISTS  CHECKED!  THEN 

02BC  02C2 ' 

02BE  5E08  EXIT  FROM  PREEMPT  CHECK 

02C0  0366' 

FI 

!  CREATE  PREEMPT  VECTOR  FOR  VP'S  ! 
02C2  eD18  CLR  Rl 

DO  ! FOR  Rl=l  TO  NR  VP'S! 

02C4  A910  INC  Rl 

02C6  4B21  CP  Rl,  APT. VP. NR  V?(R2) 

02C8  0010' 

IF  GT  !  PREEMPT  VECTOR  COMPLETED  ! 
02CA  5E02  THEN  EXIT 

02CC  02D2  ' 

02CE  5E08 
02D0  02De' 

FI 

02D2  0DF9  PUSH  9RlS,  #TRUE 
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02D4  0001 
02D6  EfeF6 


OD 

!  #  TO  PPEEMPT  ! 

02D8  8D38  CLR  R3 

02DA  5124  LD  R4 ,  APT. VP. NR  VP(R2^ 

02DC  0010  ' 

!  #  OF  VP'S  ! 

!  GET  FIRST  READY  PROCESS  ! 

02DE  6121  LD  Hi,  APT. READY  LIST(R2) 

02E0  0006' 

CHECK  RDY  LIST: 

DO 

!  SEE  IF  READY  LIST  IS  EMPTY  ! 

02E2  0JB01  CP  Rl,  #NIL 

02E4  FFFF 

IF  EO  ! LIST  IS  EMPTY! 

e2E6  5E0E  THEN  EXIT  FROM  CHECK  RTY_LIST 

02E8  02EE ' 

02EA  5E0e 
02EC  0324' 

FI 

02EE  4D11  CP  APT.A?.STATE(R1  ) ,  ^RUNNING 

02F0  002A ' 

02F2  0000 

IF  EO  ! PROCESS  IS  RUNNING! 

02F4  5E0E  THEN  !DON'T  PREEMPT  IT! 

02F6  030C  ' 

02F8  6115  Lr  85,  APT.AP.7P  ID(Rl) 

02FA  002E  ' 

! COMPUTE  LOCATION  IN  PREEMPT  VECTOP! 
02FC  4325  SUE  R5,  APT .VP . FIRST (R2 ) 

02FE  0014' 

0300  74F6  LEA  R6 ,  Rl5(R5) 

0302  0500 

0304  0D65  LD  (?R6,  #FALSE 

0306  0000 

0308  5E08  ELSE  !  PREEMPT  IT  ! 

030 A  030E ' 

030C  A930  INC  R3 

FI 

030E  AE40  DEC  R4 

0310  0B04  CP  R4 ,  #0 

0312  0000 

IF  EO  ! ALL  VP'S  VERIFIED! 

0314  5E0E  TEEN 

0316  031C ' 

0318  5E08  EXIT  FROM  CHECK  RDY  LIST 

031 A  0324' 

FI 

!  GET  NEXT  AP  IN  READY  LIST  ! 

031C  6110  LD  R0 ,  APT. AP. NEXT  AP(Rl) 


STf" 


031E 

0020  ' 

0320 

A101 

LD  Rl,  P0 

0322 

E8DF 

OD  ! END  CHECK  RI>Y  LIST! 

!  SET  NECESSARY  PREEMPTS  ! 

0324 

0326 

5124 

0010' 

LD  R4 ,  APT .VP.NR_VP (R2 ) 

0328 

032A 

6121 

0014' 

LD  El,  APT. VP.FIRST(R2) 

SEND  PREEMPT: 

DO 

032C 

97F0 

POP  R0 ,  3R15 

!  CHECK  TEMPLATE  ! 

032E 

0330 

0500 

0001 

CP  c0,  #TRUE 

IF  Eg  ! C AN  EE  PREEMPTED! 

0332 

0334 

5E0E 

0350' 

THEN 

0336 

0338 

0B03 

0000 

CP  R3,  #0 

IF  GT  IPREEMPTS  REQUIRED ! 

033A 

033C 

5E02 

0350' 

THEN  ! PREEMPT  IT! 

! SAVE  ARGUMENTS! 

033E 

93F1 

PUSH  OR15.  51 

0340 

91F2 

PUSHL  OR15,  RR2 

0342 

93F4 

PUSH  CaR15 ,  R4 

0344 

5F00 

CALL  SET.PREEMPT 

0346 

0000» 

! PI :  VP  ID! 

!  RESTORE  ARGUMENTS  ! 

1 

0348 

97F4 

POP  R4,  GP-15 

034 A 

95F2 

POPL  RR2,  f*Hl5 

034C 

97F1 

POP  Rl,  GR15 

034S 

AB30 

DEC  R3 

FI 

FI 

0350 

A911 

INC  Rl,  ft 2 

0352 

AB40 

DEC  R4 

0354 

0356 

0Be4 

0000 

CP  RA,  #0 

IF  EO  ! STACK  RESTORED! 

t 

03se 

5E0E 

THEN 

i 

035A 

0360' 

\ 

035C 

5E08 

EXIT 

i 

035E 

0362' 

FI 

i 

0360 

S8E5 

OD  ! END  SEND  PREEMPT! 

!  CHECK  N£XT~READY  LIST  ! 

i 

0362 

A921 

INC  R2 ,  #2 

i 

0364  E8A8 


OD  ! END  PREEMPT  CHECK! 
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!  UNLOCK  APT  ! 


0366 

7604 

LDA 

R4 ,  APT. LOCK 

0368 

0000' 

036  A 

6F00 

CALL 

K_UNLOCK 

036C 

0000* 

1  RESTORE  SUCCESS  CODE 

e36E 

2100 

LD 

R0,  #SUCCEEDED 

0370 

0002 

FI 

!  RESTORE  STACK  ! 

0372 

010F 

ArD 

R15.  #S I ZEOF  TEMP 

0374 

0012 

0376 

9E08 

RET 

e378 

END  TC 

ADVANCE 

0378  TC  AWAIT  PROCEDURE 

*  CHECKS  USER  SPECIFIED  VALUE  * 

*  AGAINST  CURRENT  EVENTCOUNT  * 

*  VALUE.  IE  USER  VALUE  IS  LESS  * 

*  THAN  OP  EQUAL  EVENTCOUNT  THEN* 

*  CONTROL  IS  RETURNED  TO  USER.  * 

*  ELSE  USER  IS  BLOCKED  UNTIL  * 

*  EVENT  OCCURRENCE.  * 

*  PARAMETERS:  * 

*  Rl:  HANDLE  POINTER  * 

*  R2  :  INSTANCE  (EVENT  *)  * 

*  R®4:  SPECIFIED  VALUE  * 

*  RETURNS :  * 

*  ?0 :  SUCCESS  CODE  * 

fV*ff*l|l***«)«***«*»V«*«¥«*****Vff  ! 

SNTP* 

!  ESTABLISH  STACK  FRAME  FOR 
TEMPORARY  VARIABLES.  * 

2378  030F  SUB  R15,  #SIZEOF  TEMP 
037 A  0012 

!  SAVE  INPUT  PARAMETERS  ! 

037C  6FF1  LD  TEMP. HANDLE  PTR(Rl5),  Rl 

037E  0000 

e360  6FF2  LD  TEMP. EVENT  NR ( Rib  ) ,  R2 
03e2  0002 

0384  5DF4  DDL  TEMP. EVENT  VAI(R15),  RR4 
0386  0004 

!  LOCK  APT  ! 

0388  7604  LDA  R4.  APT. LOCK 
038 A  0000' 

038C  5F00  CALL  K_LOCK 

038E  0000* 

!  RETURNS  WHEN  APT  IS  LOCKED  ! 

!  GET  CURRENT  EVENTCOUNT  ! 

0390  5F00  CALL  MM_READ_EVENTC OUNT 

c.i qv  PL'i/t/v 

! Rl : HANDLE  POINTER 
R2: INSTANCE 
RETURNS  : 

R0 : SUCCES S  CODE 
RR4 :  EVENTCOUNT! 

0394  0B00  CP  R0 •  #SUCCEEDED 

0396  0002 

0398  5E0E  IF  SC  THEN 

039 A  0440' 

!  DETERMINE  IF  REQUESTED  EVENT 
HAS  OCCURRED  ! 
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039C  54F6 
039E  000 4 
03A0  9046 

03A2  5E02 
03A4  0440' 

03A6  5F00 
03A6  0000* 


03AA  6FF1 
03AC  0008 
03AE  6FF3 
03B0  000A 
03B2  6118 
03B4  0002' 

e3B6  61F2 
03B8  0002 
03BA  61F1 
e3BC  0000 

03BE  5414 
03C0  0000 
03C2  5D84 
03C4  0030' 
0  3C6  6114 
03C8  0004 
03CA  6F84 
03CC  0034' 
03CE  6F92 
03D0  0036' 
03D2  54F6 
03D4  0004 
03D6  5De6 
03D6  0038' 

03DA  6181 
03DC  002C  ' 
03DE  6112 
03E0  00.06' 


03E2  eB82 

03E4  5E0E 
03S6  03F4 ' 
03E8  6183 
03EA  0020' 


LDL  RR6,  T5MP.EVENT_VAL(R15) 

CPL  RR6 ,  RR4 

IF  GT  ! EVENT  HAS  NOT  OCCURRED! 
THEN  ! BLOCK  PROCESS! 

!  IDENTIFY  PROCESS  ! 

CALL  RUNNI NG_V?  {RETURNS : 

Rl  :7P  ID 
R3  :CFU  #! 

!  SAVE  RETURN  VARIABLES  ! 

ID  TEMP . I B_VP( R15 ) ,  Rl 

LD  TEMP . CPU_NUM( Rl5 ) ,  R3 

LD  R8 *  APT.RUNNING_LIST (Rl ) 

!  RESTORE  REMAINING  ARGUMENTS  ! 

LD  R2,  TEMP.EVENT_NR(R15) 

LD  Rl,  TEMP .HAND LE_PTR ( Rl 5 ) 

!  SAVE  EVENT  DATA  ! 

LDL  RR4 ,  HANDLE_VAL.HIGH(Rl) 

LDL  APT. AP. HANDLE (R8) ,  RR4 

LD  R4,  HANDlE_VAL.10w(Rl > 

LD  APT. AP. HANDLE  [2J (R8) ,  R4 

LD  APT. AP. INSTANCE (Re ) ,  R2 

LDL  RR6,  TEMP.EVSNT_VAL(R15> 

LDL  APT.AP.VALUE(RS),  RR6 

!  REMOVE  PROCESS  FROM  READY  LIST  ' 
LD  Rl,  APT. AP. AFFINITY (RS ) 

LD  R2 ,  APT.READY_LIST(R1  ) 

!  SEE  IF  PROCESS  IS  FIRST 
ENTRY  IN  READY  LIST  ! 

CP  R2 ,  Rg 

IF  EC  !  INSERT  NEW  READY  LIST  DIJ»D' 
THEN 

LD  R3 .  APT. AP. NEXT  AP(R8' 
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03KC 

6F13 

LB 

APT  .REaDY_LIST(?,1 )  ,  R3 

03EE 

0006 

03F0 

5E08 

ELSE 

'DELETE  FROM  LIST  BOD!! 

03F2 

040E  ' 

DO 

03F4 

6123 

ID 

R3 ,  APT .AP ,NEXT_AP ( R2 ) 

03F6 

0020' 

03F8 

SE83 

CP 

R3 ,  R8 

IF 

EC  'FOUND  ITEM  IN  LIST! 

03FA 

5E0E 

THEN 

03FC 

040A  ' 

03FE 

6183 

LD  R3  *  APT . AP .NEXT.AP ( R8 1 

0400 

0020  ' 

0402 

6F23 

LD  APT.AP .NEXT_AP(R2) ,  R3 

0404 

0020' 

0406 

5E08 

EXIT 

0408 

040E ' 

FI 

040A 

A132 

ID 

R2,  R3 

040C 

E8F3 

OE 

FI 

JTHREAD  PROCESS  IN  BLOCKED  LIST! 

040E 

A182 

LD 

R2,  R8 

0410 

7603 

LDA 

R3  ,  APT . BLOCXED_LIST 

0412 

000A  ' 

0414 

7604 

LDA 

R4,  APT.AP. NEXT. AP 

0416 

0020' 

0418 

760b 

LDA 

SS,  APT.AP. PR  I 

041 A 

0028' 

041C 

7606 

LDA 

R6 ,  APT.AP. STATE 

041E 

002 A' 

0420 

2107 

LD 

R7,  *  BLOCKED 

0422 

0002 

0424 

5F00 

CALL 

LIST.I NSERT  !R2:0£J  ID 

0426 

0000» 

R3:LIST  HEAD  PT 
R4  : NEXT  OBJ  FTP 
Rb:  PRIORITY  PTR 
R6:STATE  PTR 
R7:STATS  ! 

!  GET 

CURRENT  VP  ID  ! 

0428 

61F1 

LD 

Rl,  TEMP . ID_VP (R15 ) 

042 A 

0008 

042C 

61F3 

LD 

R3,  TEMP.CPU_NUM(R15) 

042E 

000A 

!  SCHEDULE  FIRST  READY  PROCESS  ! 

0430 

5F00 

CALL 

TC_GETWORK  !R1:VP_ID 

0432 

0000' 

0434  7604 


!  UNLOCK  APT  ! 

LDA  P.4,  APT. LOCK 


R3:CPU  »! 


£436 

0000' 

0438 

5F00 

CALL  K_UNLOCK 

243A 

0000s*6 

!  RESTORE  SUCCESS  COLE 

043C 

2100 

LD  F0  ,  #SUCCEEDE1) 

043E 

0002 

FI 

FI 

!  RESTORE  STACK  ! 

0440 

010F 

ADD  R15 ,  #SIZEOF  TEMP 

0442 

0012 

2444 

9EE8 

RET 

0446 

END  TC_AWAIT 

143 


0446  PROCESS  CLASS  PROCEDURE 

f  VW  W  VVVQV  w  VM  wn«  v**  w 

*  READS  SECURITY  ACCESS  * 

*  CLASS  OE  CURRENT  PROCESS  * 

*  IN  APT.  CALLED  B*  SEG  * 

*  MGR  AND  EVENT  MGR  * 

WVWWVWW*I*V>IIVW&WW1<*W&& 

*  LOCAL  VARIABLES:  * 

*  Hi:  VP  ID  * 

1)1  R5 :  PROCESS  ID  * 

vwvwwvw’rwvwwwvwwK’? 

*  RETURNS:  * 

*  RR2 :  PROCESS  S  AC  * 


ENTRY 

0446 

7604 

IDA 

R4.APT . LOCK 

0448 

0000  ' 

044A 

5F00 

CALL 

K_L0CK  !R4:''APT.L0CK! 

044C 

0000* 

044E 

5F00 

CALL 

RUNN ING_VP  ! RETURNS  : 

e4b0 

000e* 

R1 : VP  ID 

R3JCPU  #! 

0452 

6115 

LD 

R5, APT . RUNNlNG_LIST (R1  ) 

0454 

0002  ' 

0456 

5452 

ILL 

RR2 , APT . A? . SAC ( Rb ) 

0458 

0024' 

!  UNLOCK  APT  ! 

045A 

7604 

IDA 

R4,  APT. LOCK 

045C 

0000' 

04b£ 

5F00 

CALL 

K_UNL0CK 

0460 

0000* 

0462 

9E08 

RET 

V 464  End  PROCESS  CLASS 
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0464  GET  DBR  NUMBER  PROCEDURE 

f  MwivwWWWWWWWW.W'WVWWif 

*  OBTAINS  DBR  NUMBER  FROM  APT  * 

*  FOR  THE  CURRENT  PROCESS.  * 

*  CALLED  Bv  SEGMENT  MANAGER  * 

VW  W  wv  WV  V  W  W  WJ»  w 

*  LOCAL  VARIABLES:  * 

*  PI:  VP  ID  * 

*  R5:  PROCESS  ID  * 

v * *  *  w  v mm  w ** j* * » **  v  v *m m ¥  v  »  w  v  w *  m  w 

*  RETURNS:  * 

*  Rl:  DB?  NUMBER  * 

tfWWWWWWWWWWWWWWWW  I 

ENTRV 

! NOTE :  DBR  n  IS  ONLY  VALID  WHILE  PPOCE 
IS  LOADED.  THIS  IS  NO  PROBLEM  IN  SAS 
AS  ALL  PROCESSES  REMAIN  LOADED.  IN  A 
MORE  GENERAL  CASS,  THE  DBR  *  COULD  ONLY 
BE  ASSUMED  CORRECT  WHILE  THE  APT  IS  LOCKED 


£464 

0466 

7604- 
0000  ' 

LDA 

R4, APT. LOCK 

046e 

e46A 

5Fe0 

0000* 

CALL 

K_10CK  !  P.4 :~  APT.  LOCK! 

046C 

5F00 

CALL 

RUNN ING_VP  !  RETURNS: 

046E 

0000* 

Rl : VP  ID 

R3 : CPU  »! 

0470 

0472 

6115 

0002' 

LD 

R5, APT. RUNNING  LIST(RH 

0474 

0476 

6151 
0022  ' 

LD  P.1,  APT.  AP.  DBR  (35) 

!  UNLOCK  APT  ! 

0478 
047  A 

7b04 

0000' 

LDA 

R4,  APT. LOCK 

047C 

047E 

5F00 

0000* 

CALL 

KJJNLOCK 

04-80 

9E08 

RET 

0482 

END  GET_DBP._ NUMBER 

END  TC 
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APPENDIX  C  -  DISTRIBUTED  MEMOR I  MANAGER  LISTINGS 


Z8000ASM  2.02 

IOC  OBJ  CODE  STMT  SOURCE  STATEMENT 


$  LIS TON  STT^ 
DIST_MM  MODULE 

CONSTANT 

C?EATE_CODE 
DELETE_CODE 
ACTI VATE_CODE 
DEACTIVATE  CODE 
SWAP  IN  CODE 
S¥AP~OUT  CODE 
NR  CPU 

NR~KST_ENTRY 
MAX_SEG_S IZE 
MAX_DBR  NO 
5ST_SEG-N0 

nr_of_ksegs 

ELOCK_S IZE 
MEM  AVAIL 
G  AST  LIMIT 
I NST ANCE1 
INSTANCE2 
INVALID  INSTANCE 
SUCCEEDED 

TYPE 

E_  ARRAY 
COM  MSG 
ADDRESS 

G  AST  REC 

Tunioue_id 

GLOEAL_ADDR 
P  L_ASTE  NO 
FLAG 

PAR  ASTE 
NR  ACTIVE 
NO-ACT  dep 
SIZE1 
PG  TBL 
ALIAS  TBL 
SEQUENCER 
EVENT1 
EVENT 2 

J 


=  50 
*  51 
=  52 
=  53 
=  54 
=  55 
=  2 
=  54 
=  12  = 

=  4 
=  2 
=  10 
-  U 

=  *F00 
=  10 
=  1 
=  2 
=  95 
=  2 


ARRAY  [3  WORD] 
ARRAT  [16  BYTE] 
WORD 

RECORD 

LONG 

ADDRESS 

WORD 

WOPD 

WORD 

WORD 

BYTE 

BYTE 

ADDRESS 

ADDRESS 

LONG 

LONG 

LONG 
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S  EG_AFRAY  ARRAY  [MAX_SEG_SIZE  BYTE] 

SSECTION  D  MM  DATA 
GLOBAL 

MM_CPU_T3L  ARRAY  [NR_CPU  ID] 

SSECTION  AVAIL  MEM 
INTERNAL 

!  NOTE:  MEM  POOL  IS  LOCATED  IN 
CPU  LOCAL~MEMORY .  ! 

MEM_?OOL  ARRAY  [MEM_AV AIL  BYTE] 

GLOBAL 

!  NOTE:  NEXT  BLOCK  IS  USED  IN  THE  MM  ALLOCATE 
STUB  AS  AN~OFFSET  POINTER  INTO  TH£~£LOCK 
Of  ALLOCATABIE  MEMORY.  IT  IS  INITIALIZED 
IN  BOOTSTRAP  LOADER.  ! 

NEXT  BLOCK  WORD 

SSECTION  MSG  FPAME_DCL 
INTERNAL 

!NOTE:  THESE  RECORDS  ARE  "OVERLAYS"  OR  "FRAMES"  USED 
TO  DEFINE  MESSAGE  FORMATS.  NO  MEMORY  IS  ALI OCATED  ! 
SABS  0 

CREATE  MSG  RECORD  fCR  CODE  WORD 

C£~MM_HAN  DDE  H_ ARRAY 
CE_fiNTRY_NO  SHORT_I NTEGER 
C£  FILL  '  EYTE 
CK~SIZS  WORD 

CE'CLASS  LONG] 

SABS  0 

DELSTE_MSG  RECORD  [DE  CODE  WORD 

DE-MM  HANDLE  H  ARRAY 
DE'ENTRY  NO  SEORT_I NTEGER 
DE_FILL  APRAYT?  BYTEJ  ] 

SABS  0 

ACTIVATE  MSG  RECORD  [ACT  CODE  WORE 

A~DBR_NO  WORr 

A~ MM  HANDLE  H  ARRAY 

a"entry_no  short  integer 
a"segment  no  short"integer 

A~FILL  "  LONG  1 "* 


SAES  0 


oeoo 

DEACT I7ATE_VSG 

RECORD 

[DEACT  CODE 

WORD 

D  DBR  NO 

WORD 

D~VV  RANDLE 

H  ARRAY 

d'fill 

A PRAT [3 

WORD!  J 

SA3S  0 

0000 

S WAP_IN_VSG 

RECORD 

rs  IN  CODE 

WORD 

SI  VV  HANDLE 

H  ARRAY 

S  I~D£F  NO 

WORD 

SI  access  aute  byte 

SI  PIU1 

BVTE 

SI'FILL 

ARRAY [2 

W  CRD J  J 

SABS  0 

0000 

SWAP_OTJ?_MSG 

RECORD 

[S  OUT  CODE 

WORD 

SO  DBF.  NO 

WORD 

SO”*V  HANDLE 

H  ARRAY 

SO  FILL 

ARRAY [3 

WORD]  J 

$  ASS  0 

0000 

R£T_SUC_COD£ 

RECORD  [SUC  CODE 

BYTE 

SC  FILL 

J 

ARRAY [13 

BvTE’j 

SABS  0 

0000 

P_ACTIVATE_A.RG 

RECORD 

[R  SUC  CODE 

3VTE 

R’FILL 

EYTE 

R’VV  HANDLE 

H  ARRAY 

R "CLASS 

LONG 

P.’S  IZS 

WORD 

fi’FlLIl 

wop.rj 

SABS  0 

0000  MV  HANDLE  RECORD 

[ID  LONG 

EN?PV  NO  WOPD 

J 


EXTERNAL 


G  AST  LOCK 


rfOHD 


G_AST  ARRAY  lG_AST_Llf^IT  G_AST_RECJ 


K_LOCK 
K  UNLOCK 


PROCEDURE 

PROCEDURE 


GET  CPU  NO  PROCEDURE 


SIGNAL 


rfAIT 


PROCEDURE 

PROCEDURE 


**r<s>-*'+**mP* 


GLOBAL 

$SECTION  D_MM_PROC 


0fe3fejfe9  MM  CREATE  ENTRY  FROCEDURE 


3Q6 

INTERFACE  BETWEEN  SEG  MGR 

3* 

(CREATE  SEG  PROCEDURE^  AND 

age 

* 

MMGR  PROCESS  (CREATE  ENTRY 

3* 

PROCEDURE).  AfiRANGES~AND 

39c 

PERFORMS  IPC. 

act 

V 

REGISTER  USE: 

age 

act 

PARAMETERS 

V 

V 

R0  :  SUCCESS  CODE  (RET) 

3? 

V 

RlthPTR  (INPUT) 

V 

* 

R2 : ENTRV  NO  (INPUT) 

V 

V 

R3JSIZE  IlNPUT) 

V 

V 

RR4  :CLASS  (INPUT) 

39c 

39* 

LOCAL  USE 

39s 

V 

Rb : MM  HANDLE  ARRAY  ENTR v 

3* 

3* 

R8 : ~COM  MSGBUF 

* 

R13:"C0M  MSGBUF 

act 

VSfifiWWWWVWWWWV  W  WW  WWW  1 

ENTRY 

! USE  STACK  FOR  MESSAGE! 

0000  030F  SUB  R15,#SIZE0F  COM_MSG 
0002  0010 

0004  AlFD  LD  R13 ,R1 5  !  ~COM_MSGBUF  ! 

! F ILL  COM  MSC-BUF  {LOAD  MESSAGE).  CREATE  MSG 
FRAME  IS  BASED  AT  ADDRESS  ZERO.  IT  IS 
OVERLAID  ONTO  COM  MSGBUF  FRAME  £T  INDEXING 
EACH  ENTRY  (I.E.  ADDING  TO  EACH  ENTRY)  THE 
BASE  ADDRESS  OF  COM  MSGBUF ! 


000  b 

4DD5 

LD 

0008 

0000 

000  A 

0032 

000C 

3116 

LD 

000E 

0000 

0010 

5FD6 

LD 

0012 

0002 

0014 

3116 

LD 

0016 

0002 

00ie 

6FDb 

LD 

00 1A 

0004 

001C 

3116 

LD 

001E 

0004 

0020 

6FD6 

LD 

0022 

0006 

0024 

6FD2 

LD 

CREATE_MSG.CR_C0DE(R13) ,#CREATE_CODE 

Rb,Rl(#0)  ! INDEX  TO  MM_HANDLE  ENTRY! 

CREATE_MSG.CE_MM_HANDLE[0j  (R13) ,R6 
Rb, R1 ( #2 ) 

CR£ATE_MSG.CE_MM_HANDLEll] (R13) ,R6 
Rb,Rl( #4) 

CREATE_MSG .  CE_MM_HANDLE  (.2J ( R 1 3 1 , Rb 
CREATE_MSG . CE_ENTRY_NO ( R13 ) ,R2 


0026 

0006 

0026 

6ED4 

LDL 

CR3ATE_MSG. 

002A 

000C 

002C 

6FD3 

LD 

CR£ATE_MSG. 

00  2£ 

000A 

0030 

AIDS 

ID 

R8.R13 

0032 

5F00 

CALL 

PE*>FOFf*_IPC 

0e34 

016C  * 

! RETRIEVE  SUCCESS 

0036 

8D0S 

CLR 

30 

ze36 

60D8 

LDB 

RL0  *RET_SUC 

003A 

0000 

003C 

010F 

ADD 

R15 , #S IZ  EOF 

003S 

0010 

0040 

9E08 

RET 

0042 

END 

MM_CREATE_SNTRT 

0042 


MM  DELETE  ENTRY  PROCEDURE 

<  wSwvvmvvmvvvvvvvvvvvvvvvMvyiK 

*  interface  between  seg  mgr  * 

*  (DELETE  SEG  PROCEDURE)  AND  * 

*  MMGR  (DELETE  ENTRY  PROCEDURE ) .* 
9  ARRANGES  AND'PERFORMS  IPC.  * 

9  99  9 9  9  9  9 9  V  9 9 99  W  W  9 9  W  ««  9  *  SJI *  *  9 9  *  9  *  9 


*  PSGISTER  USE:  * 

*  PARAMETERS  * 

*  R0 :SUCCESS  CODE(RET)  * 

9  Rl : HPTR (INPUT  )  " 

9  R2 : ENTRY  NO(INPUT)  * 

*  LOCAL  USE~  * 

*  R6 : MM  HANDLE  ARRAY  ENTRY  * 

*  R8:~cCM_MSGBUF  * 

9  R13:'’C0M  MSGBUF  9 


ENTRY 


!  USE 

STACK  FOR  MESSAGE! 

0042 

030’F 

SUB 

R15,#SIZE0F  COM_MSG 

0044 

0010 

0046 

AlFD 

LD 

B13.H15  !  ''COM_MSGBUF  ! 

!FILL  COM  MSGBUF  (LOAD  MESSAGE).  DELETS_MSG  FRAME 
IS  £ASED~AT  ADDRESS  ZERO.  IT  IS  OVERLAID  ONTO 
COM  MSGBUF  F®AMJf  BY  INDEXING  EACH  ENTRY  U.E.  ADD¬ 
ING  TO  EACH  ENTRY)  THE  BASE  ADDRESS  0?  COM  MSGBUF! 
0048  4DD5  LD  DELETE  MSG.DE  C0DE(R13^,#LELETE_C0DE 

004A  0000 
004C  0033 

004E  3116  LD  R6» Rl(*fc)  !INDEX  TO  MM  HANDLE  ENTRY! 

0050  0000 

0052  6FD6  LD  DELETE  MSG.DE  MM  HANDLE (0 ] (R 13 )  ,R6 

0054  0002 

0056  3116  LD  R6,R1(#2) 

0058  0002 

005A  6FD6  LD  DELETE  MSG.DE  MM  HANDLE  UJ  (P.13  ),  R6 

005C  0004 

005E  3116  LD  R6,P1(#4) 

0060  0004 

0062  6FD6  LD  DELETE  MSG.DE  MM  HANDLE [2j  (R13  )  ,B6 

0064  0006 

0066  6FD2  LD  DELSTE_MSG . DE_SNTRY_NO ( R13) ,32 

006e  0006 

006A  AIDS  LD  R8,R13 

006C  5F00  CALL  PERFORM  IPC  !Rfc:  ''COM  MSGBUF' 

006E  018C' 

! PETR IEVE  SUCCESS  CODE  FROM  RETURNED  MESSAGE! 
0070  8D06  CLR  R0 

0072  60DB  LDB  RL0 , RET_SUC_CODE  .SUC.CODE ( R13 ) 

0074  0000 

0076  ei0F  ADD  R15 ,#S IZEOF  COM  MSG  JRESTORE  STACK  STATE! 

0078  0010 

007 A  9E08  RET 

007C  END  MM  DELETE  ENTRY 
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eo7c  MM  activate  procedure 

f  XfVWVJfwwwWWWWWVWWWWMV 

’*  INTERFACE  BETWEEN  SEG  MGR  * 

*  (MAKE  KNOWN  PROCEDURE  ^  AND  * 

*  MMGR  "  (ACTIVATE  PROCEDURE).  * 

*  ARRANGES  AND  PERFORMS  IPC .  v 


*  REGISTER  USE:  * 

*  PARAMETERS  * 

*  RUDER  NO  ( INPUT  )  * 

*  R2:HPTR( INPUT)  * 

*  R3:£NTRY  NO  * 

*  R4:SEGMENT  NO  * 

*  R12:RET_HANDLE_PTR  * 

*  LOCAL  USE  * 

*  R8  :"'COM_MSGiUF  * 

*  P13:"C0M  MSGBUE  * 

*  RETURNS:  “  * 

*  R0  :SUCCESS  CODE  * 

*  PR2 :CLASS  * 

*  R4:SIZE  * 


ENTRT 

! USE  STACK  FOR  MESSAGE! 

007C  030F  SUB  R15,#SIZE0F  COM  MSG 

007E  00145 

O080  A1FD  LD  F13.R15  !  "COM_MSGBUE  ! 

!  SAVE  RETURN  HANDLE  POINTER  ! 

0082  93FC  PUSH  PR  15,  R12 

!FILL  COM_MSGBUF  (LOAD  MESSAGE).  ACTIVATE  MSG  FRAME 
IS  BASED  AT  ADDRESS  ZERO.  IT  IS  OVEELAID'ONTO 
COM_MSGBUI  FRAME  BT  INDEXING  EACH  ENTR-7  (I.E.  ADD¬ 
ING  TO  EACH  ENTRY)  THE  BASE  ADDRESS  CF  COM  MSGBUF! 
0084  4DDb  ID  ACTIVATE_MSG. ACT  CODE (R13 > , *ACTI VATE  CODE 

0086  0000 
0088  0034 

008A  6FD1  LD  ACTIVATE  MSG. A  DER  N0(R13),R1 

008C  0002 

008E  3126  LD  R6,R2(#0) 

0090  0000 

0092  6FB6  LD  ACTIVATE  MSG. A  MM  HANDLE  [ 0j  ( R 13 5 ,R6 

0094  0004 

0096  3126  LD  R6,R2(#2) 

0098  0002 

009 A  6FD6  LD  ACTIVATE  MSG. A  MM  HANDLE HJ ( Rl3 ) ,R6 

009C  0006 

009E  3126  LD  R6,R2(#4) 

00A0  0004 

00A2  6FD6  LD  ACTIVATE  MSG. A  MM  HANDLE L2J ( 313) ,R6 
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00 A4  000s 

00A6  6EDB  LDB  ACTI VATE_MSG . A_ENTR Y_NO ( R13 ) ,RL3 

00A8  000A 

00AA  6ErC  LDB  ACTIVATE  MSG. A  SEGMENT  N0( R13' ,RL4 
00AC  000B 

00AE  AIDS  LD  RS.P13 

00B0  5F00  CALL  PERFORM  IPC  !(RS:"COM  MSGBUF ! 

00B2  018C  * 

!  RESTORE  RETURN  HANDLE  POINTER  ! 

00B4  97FC  POP  R12,  ORlb 

!  UPDATE  MM_HANDLE  ENTRY  ! 

00B6  54D6  LDL  RR6,  R  ACTI VATS_ARG . R  MM  HANDLE ( R12 ) 

00B8  0002 

00iA  5DC6  LDL  MM  HANDLE. ID( R12 )  ,  P.R6 

00BC  0000 

00BE  6 1D6  LD  R6,R  ACTIV  ATE_ARG  .R_*M  HANDLE  1 2J  ( R13 ) 

00C0  0006 

00C2  6FC6  LD  MM  HAN  DIE. ENTRY  N0(R12),  R6 

00C4  0004 

! RETRIEVE  OTHER  RETURN  ARGUMENTS! 

00C6  SD08  CL*  R0 

00C8  60D8  LDB  RL0,R  ACTIVATE  ARG.R  SUC_CODE( Rl?) 

00C A  0000 

00CC  54D2  LDL  RR2,R  ACTIVATE  ARG.R  CLASS(R13) 

00CE  0008 

00D0  61D4  LD  R4,R  ACTIVATE  ARG.R  SIZE(P13) 

00D2  000C 

00D4  010F  ADD  R15,#S IZSOF  COM  MSG  JRESTOflE  STACK  STATE! 

00D6  0010 

00D8  9E08  RET 

00DA  END  MM  ACTIVATE 
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eeDA 


MM  DEACTIVATE  FROCEDUKE 

f  vWffVWWWaWWWWWWVWWWiiiW 

*  INTERFACE  BETWEEN  SEG  MGR  * 

*  (TERMINATE  PROCEDURE )  AND  * 

*  MMGR  (DEACTIVATE  PROCEDURE).  * 

v  ARRANGES  AND  PERFORMS  IPC .  * 

jf.ww  w  w* 

*  REGISTER  USE:  * 


*  PARAMETERS  * 

*  R0 :SUCCESS  COD£(RET  ^  * 

*  R1 :DBR  NO(lNPUT)  * 

*  R2:HPTR(INPUT)  * 

*  LOCAL  USE  * 

*  R6 :MM  HANDLE  ARRAY  ENTRY  * 

*  R8 : ~COM_MSGBUF  * 

*  R13  :~COM  MSGBUF  * 


ENTRY 

.'USE  STACK  FOR  MESSAGE! 

02 DA  030F  SUB  R15,#SIZE0F  COM  MSG 

00DC  0010 

00DE  A1FD  LD  R13.R1S  !  ''COM  MSGEUF  ! 


!FILL  COM_MSGBUF  (LOAD  MESSAGE).  DEACTIVATE  MSG  FRAME 
IS  BASED"aT  ADDRESS  ZERO.  IT  IS  OVERLAID  ONTO 
COM  MSGBUF  FRAME  BY  INDEXING  EACH  ENTRY  (I.E.  ADD¬ 
ING  mO  EACH  ENTRY )  THE  BASE  ADDRESS  OF  COM  MSGEUF! 


00E0 

00E2 

00E4 

4DD5 

0000 

0035 

LD 

00E6 

00E8 

6FD1 

0002 

LD 

00EA 

00EC 

3126 

0000 

LD 

00EE 

00F0 

6FD6 

0004 

LD 

00F2 
00F  4 

3126 

0002 

LD 

00F6 

00F8 

6FD6 

0006 

LD 

00FA 

00FC 

3126 

0004 

LD 

00FE 

0100 

6FD6 

0008 

LD 

0102 

AIDS 

LD 

0104 

0106 

5F00 
018C  * 

CALL 

DEACTIVATE  MSG . D£ACT_CODE ( R13 > , 

#DEACT1VATE_C0EE 

DEACTIVATE_MSG.D_DBR_N0(R13) ,R1 

Rb,P2(#0)  JINDEX  TO  MM_KAN DDE  ENTRY ! 

DEACTIVATE_MSG.r_MM_HANELE[0j (R13) ,R6 

K6,R2(#2) 

DEACTIVATE_MSG.D_MM_HANDLE(1 J (R13) ,R6 
R6,R2(#4) 

DEACTIVATE_MSG.D_MM_HANDLEL2J (R13) ,  fib 
R6.R13 

PERFORM  IPC  ! R8 :  "COM  MSGBUF! 
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!»£TRIEVE  SUCC£SS_CGDE  FROM  RETURNED  MESSAGE! 
^1^8  8D08  CIR  P.0 

010A  60D8  LDB  RI0  ,PET_SUC_CODE  .SUC_C0EJl(?12  > 

010C  0000 

010E  010F  ADD  Rib, #S  I ZEOF  COM  MSG  'RESTORE  STACK  STATE! 

0110  0010 
0112  9E08  R.ET 

0114  END  MM  DEACTIVATE 


0114  030F 
0116  0010 
0lie  AlFD 


MM  SWAP  IN  PROCEDURE 

|  ****** 

’*  interface  between  seg  mgr  (smj* 

w  SWAP  IN  PROCEDURE)  AND  MMGR  * 

*  (S'WAP_IN  PROCEDURE).  ARRANGES  * 

^  AND  PERFORMS  IPC  .  * 

*  REGISTER  USE:  * 

*  PARAMETERS  * 

*  R0  :SUCCESS  CODE(RET)  9 

*  risebh  no (Input )  9 

*  «2:HPTR( INPUT)  9 

*  R3 : A  CCES  S  (INPUT)  * 

*  LOCAL  USE  * 

*  R6 : MM  HANDLE  ARRAY  ENTRY  9 

*  R0:~COM_MSGBUF  9 

*  R13:~C0M_MSGBUF  9 

******* v*************************  ! 

EN^R^ 

•USE  STACK  FOR  MESSAGE! 

SUB  R15,#SIZE0F  COM_MSG 

LD  R13.R15  !  ~COM_MSGBUF  ! 


011A 
011C 
011E 
0120 
0122 
0124 
0126 
0128 
012  A 
012C 
012E 
0130 
0132 
0134 
0136 
0138 
013A 
013C 
013E 
0140 
0142 
0144 


'FILL  COM  MSGEUF  (LOAD  MESSAGE).  SWAP_IN_MSG  FRAME 
IS  3ASSD-AT  ADDRESS  ZERO.  IT  IS  OVERLAID  ONTO 
COM  ^SGBUF  FRAME  BY  INDEXING  EACH  ENTRY  (I.E.  ADD- 
lNG~TO  EACH  ENTRV)  THE  BASE  ADDRESS  OF  C0M_MSG3UF ! 


4DD5 
0000 
0036 
3126 
0000 
6FD6 
0002 
3126 
0002 
6FD6 
0004 
3126 
0004 
6FD6 
0006 
6Fn 
0008 
6FDB 
000A 
A1D8 
5F00 
018C  ' 


LD  SWAP_IN_MSG.S_IN_C0DE(R13U#SWAP_IN_C0DE 

LD  R6,P2(#0)  !  INDEX  TO  MM_HANDL£  ENTRY! 

LD  SWAP_IN  jMSG.SI_MM_HANDLEl0j (313) ,R6 

LD  R6,?2(#2) 

LD  SWAP_IN_MSG.SI_MM_EANDL£(1J (R13^ ,R6 

ID  36,R2(#4) 

LD  SWAP_IN_MSG.SI_MM_EANDL£[2]  (R13)  ,R6 

LD  SWAP_IN_MSG.SI_D£R_NO(R13) ,R1 

LDB  S'VAP_IN_MSG.SI_ACCESS_AUTH(R13)  .RL3 

LD  R8,R13 

CALL  PER JQRM^IPC  !R8:  COM_MSGBUF! 


«*■ 


!  RETR IJfiVE  SUCCESS  CODE  FROM  RETURNEE  MESSAGE! 

ei46  eoee  clr  Re 

0148  60D8  IEB  RL0.RET  SUC  CODE.SUC  C0DE(R13) 

ei4A  eeee 

ei4C  eieF  add  ri5,#sizeof  com  msg  jrestore  stack  state 

014E  0010 

0150  9E08  RET 

0 152  END  MM  SWAP  IN 


0152  MM  SWAP  OUT  PROCEDURE 

J  WS W W*S> VWWWW 

*  INTERFACE  BETWEEN  SEG  MGR  (SM  * 

*  SWAP  OUT  PROCEDURE )  AND  MMGR  * 

*  (SWAF  OUT  PROCEDURE).  ARRANGES* 

*  AND  PERFORMS  IPC.  * 

W  W  W  ¥  V  W  V*  W  *  V  W  *  *  **  V  V  V  W  *  >*  W  V  «« 


V 

REGISTER  USE: 

398 

PARAMETERS 

* 

398 

R0 :  SUCCESS  CODE(RET) 

398 

3? 

Rl:DBR  NO(INPUT) 

3*8 

398 

R2:HPTR( INPUT) 

398 

39« 

LOCAL  USE 

V 

3* 

R6 :MM  HANDLE  ARRAY  ENTRY 

3J5 

398 

R8:''C0M  MSGBUF 

398 

398 

R13:~C0M  MSGBUF 

>98 

vtf««nmiviiivvy«vii<«vv«9v«vw I 


ENTRY 


!USE 

STACK  FOR  MESSAGE! 

0152 

030F 

SUB 

R15 , #S IZEOF  COM_MSG 

0154 

0010 

0156 

AlFD 

ID 

R13.R15  !  '*COM_MSGBUF  ! 

’FILL  COM  MSGRUF  (LOAD  MESSAGE).  SWAP  OUT_MSG  FRAME 
IS  BASED'AT  ADDRESS  ZERO.  IT  IS  OVERLAID  ONTO 
COM_MSGBUF  FPAmE  by  indexing  EACH  ENTRT  (I.E.  add¬ 
ing  TO  EACH  ENTRY)  THE  BASE  ADDRESS  OF  CCM_MSGBUF! 


0158 

4DD5 

LD 

SWAP_0UT_MSG.S_CUT_C0DE(R13)  ,  #SWAP_OUT_COD£ 

015A 

0000 

015C 

0037 

R6,R2(#0)  JINDEX  TO  MM_HANDLE  ENTRY! 

015E 

3126 

ID 

0160 

0000 

SWAP_OUT_MSG.SO_MM_HANDL£l0j  (R13) ,R6 

0162 

6FD6 

LD 

0164 

0004 

0166 

3126 

LD 

R6,R2{#2) 

0168 

0002 

SWAP_OUT_MSG. S 0_*M_HAN DIE [ 1J  (R13>  ,R6 

016A 

6FD6 

LD 

016C 

0006 

36,32 (#4) 

016E 

3126 

LD 

0170 

0004 

0172 

6FD6 

LD 

SWAP_OUT_MSG . S0_MM_HAN  DIE [2J (R13) ,R6 

0174 

0008 

0176 

6FD1 

LD 

SWAP_0UT_MSG.S0_D£R_N0(R13)  ,31 

0176 

0002 

017A 

A1D8 

LD 

R8.R13 

017C 

5F00 

CALL 

P£RFORM_IPC  !RB:  ~COM_MSG£UF ! 

017E 

018C  ' 
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0180  8D08 
0182  60D8 
0184  0000 
0188  010F 
0188  0010 
018A  9S08 
018C  END 


{RETRIEVE  SUCCESS  CODE  FROM  RETURNED  MESSAGE! 
CLR  R0 

LDB  RL0 ,RET_SUC_CODE ,SUC_CODE ( R12 ) 

ADD  Rl5,*SIZEOF  COM_^SG  JRESTORE  STACK  STATE 
RET 

MM  SWAP  OUT 


160 


018C  PEP FORM  IPC  PROCEEURi 

J  JS*^«a(*as»a)e vspgjjrWWVX'******' VWWWWWWWVW 

*  SERVICE  ROUTINE  TO  ARRANGE  AND  * 

*  PERFORM  IPC  WITH  THE  MEM  MGR  PROC  * 

Jjtw  W  WWW  W**  MWW  WS(t>)t  W  WW 

*  REGISTER  USE:  * 

*  PARAMETERS  * 

*  R8  :  ''COM  MSG  ( INPUT  )  * 

*  LOCAL  USE  * 

*  R1.R2:  WORE  REGS  * 

*  R4 :  "G  AST  LOCK  * 

*  R13:  ~COM_MSGBUF  * 

ENTRr 

018C  93FD  PUSH  0R15.R13  !~C0M  MSGEUF! 

018E  5F0-0  CALL  GET  CPU_NO  JRET-R1  :CPU_N0 ! 

45190  0000* 

0192  A112  ID  R2.R1 

0194  6121  LE  Rl ,MM_CPU_TBL( R2  )  !MM_VP_ID! 

0196  0000' 

0198  7604  IDA  R4,G  AST  LOCK 

019 A  0000* 

019C  5F00  CALL  K_L0CK 

019E  0000* 

01A0  5F00  CALL  SIGNAL  !R1:MM  VP  ID,R8:"C0M  MSGEUF 
01A2  0000* 

01A4  97FD  POP  R13,PR15 

0 1A6  A1D8  LD  R8.R13  !"C0M  MSGEUF! 

01A8  93FD  PUSH  0P.1S.R13 

01AA  5F00  CALL  WAIT  !R8:"C0M  MSGEUF! 

01AC  0000* 

01AE  7604  LDA  R4 ,G_AST_L0CK 

0iE0  0000* 

01E2  5F00  CALL  K_UNL0CK 

0134  0000* 

01B6  97FD  POP  R13.0R15 

01Be  9E08  RET 

01BA  END  PERFORM  IPC 


01SA  MM.  ALLOCATE  PROCEDURE 

i  wSvvvvvvvviiimvvviiivvvvvo* 

*  ALLOCATES  BLOCKS  OF  CPU* 

*  LOCAL  MEMORY.  EACH  * 

*  BLOCK  CONTAINS  256  * 

*  BYTES  OF  MEMORY.  * 

*  9  vmm  v  *  *  v  v  *  v  * *  *  *  * v* v  v  **  v  w  * 

*  PARAMETERS :  * 

*  R3:  #  OF  BLOCKS  * 

*  RETURNS:  * 

*  R2 :  STARTING  ADDR  * 

*  LOCAL:  * 

*  R4 :  BLOCK  POINTER  * 

vvwwvww*:!? v««vw w www  ! 


01J5A  B331 
01BC  0006 


01 BE  6104 
01C0  0F00' 
01C2  7642 
01C4  0000' 
01C6  ei34 


01C8  6F04 
01CA  0F00 ' 
01CC  9E08 
01CE 


ENTRY 

f  NOTE:  THIS  PROCEDURE  IS  ONLY  A  STUB 
OF  THE  ORIGINALLY  DESIGNED  MEMORY 
ALLOCATING  MECHANISM.  IT  IS  "SED 
BY  <pgi]  PROCESS  management  demonstration 
TO  ALLOCATE  CPU  LOCAL  MEMORY  FOR  ALL 

memory  allocation  requirements,  in  an 
actual  sass  environment,  this  WOULD 

BE  BETTER  SERVED  TO  HAVE  SEPARATE 
ALLOCATION  PROCEDURES  FOR  KERNEL  AND 
SUPERVISOR  NEEDS.  (E.G.,  KERN EL_ ALIO CATE 
AND  SUPERVISOR  ALLOCATE).  ! 

!  COMPUTE  SIZE  OF  MEMORY  R50UESTID  ! 

SLL  R3,  #BLOCK_SIZE 

!  COMPUTE  OFFSET  OF  MEMORY  THAT  IS 
TO  BE  ALLOCATED  ! 

LD  R4,  NSXT_BLOCK  .'OFFSET! 

IDA  R2,  MEM_P00L(R4)  ! START  ADDR! 

ADD  R4,  R3  JUPDATE  OFFSET! 

!  UPDATE  OFFSET  IN  SECTION  OF  AVAILABLE 
MEMORY  TO  INDICATE  THAT  CURRENTLY 
REQUESTED  MEMORY  IS  NOW  ALLOCATED  ! 

LD  NEXT  BLOCK,  R4  '.SAVE  OFFSET! 


RET 

END  MM  ALLOCATE 


eiCE  MM  TICKET  PROCEDURE 

•  *****  *****************  ******* 

’*  RETURNS  CURRENT  VALUE  OF  * 

*  SEGMENT  SECUENCER  AND  * 

*  INCREMENTS  SEQUENCER  VALUE* 

*  FOR  NEXT  TICKET  OPERATION  * 

***************************** 

*  PARAMETERS:  * 

*  Rl:  SEG  HANDLE  PTR  * 

*  RETURNS:  * 

*  RR4 :  TICKET  VALUE  * 

*  LOCAL  VARIABLES:  * 

*  RR6 :  SEQUENCER  VALUE  * 

5)1  R8 :  G  AST  ENTRY  #  * 

***************************** I 

ENTRY 

!  SAVE  HANDLE  PTR  ! 

01CE  93F1  PUSH  0R15,  Rl 
!  LOCK  G  AST  ! 

01D0  7604  LDA  R4f  G_AST_LOCK 

01D2  0000* 

01D4  5F00  CALL  K  LOCK 

01D6  0000* 

!  RESTORE  HANDLE  PTR  ! 

01D8  97F1  POP  Rl,  0R15 

!  GET  G_AST  ENTRY  #  ! 

01DA  6118  LD  R8 ,  MM  HANDLE. ENTRY  NO(Rl) 

01DC  0004 

!  GET  TICKET  VALUE  ! 

01DE  54ee  LDL  RRb,  G  AST . SEQUENCER (?.e ) 

01E0  0014* 

!  SET  RETURN  REGISTER  VALUE  ! 

01E2  9464  LDL  RR4 ,  RR6 

!ADVANC£  SEQUENCER  FOR  NEXT 
TICKET  OPERATION! 

01E4  1606  ADDL  RR6,  #1 

01E6  0000 
01E8  0001 

!  SAVE  NEW  SEQUENCER  VALUE  IN  G  AST  ! 
01EA  5D86  IDL  G  AST. SEQUENCER ( R8  )  ,  RR6 
01EC  0014* 

!  UNLOCK  G  AST  ! 

!  SAVE  RETURN  VALUES  ! 

01EE  91F4  PUSHL  <?R15,  RR4 

01F0  7604  LDA  R4,  G_AST_LOCK 

01F2  0000*  ~ 

01F4  5F00  CALL  K  UNLOCK 

01F6  0000* 

!  RETRIEVE  RETURN  VALUES  ! 

01F8  95F4  POPL  RR4,  PR15 

01FA  9E08  RET 

01FC  END  MM  TICKET 
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01FC  MM  READ  EVENTCOUNT  PROCEDURE 

I  v^aM**************************** 

*  READS  CURRENT  VALUE  OF  THE  * 

*  EVENTCOUNT  SPECIFIED  BY  THE  * 

*  USER.  * 

VWWVVWVVVVMWVVVVVVVVtlVVVOWiKV 

*  PARAMETERS:  * 

*  Rls  SEG  HANDLE  PTR  * 

*  R2 :  INSTANCE  (EVENT  #)  * 

V*V***v*c**c******c*t9W*c*tw*lj|C*a(V*9*c 

*  RETURNS:  * 

*  RR4 :  EVENTCOUNT  VALUE  * 

vw  «***«  www  vmm  vmmvmmmmmmummm 

*  LOCAL  VARIABLES:  * 

*  RR6 :  SEQUENCER  VALUE  * 

*  R8 :  G_AST  ENTRY  #  * 


ENTRY 


!  SAVE  INPUT  PARAMETERS  ! 

01FC 

93F1 

PUSH 

0R15 ,  R1 

01FE 

93F2 

PUSH 

GR15,  R2 

!  LOCK  G  AST  ! 

0200 

7604 

LDA 

R4 ,  G_AST_L0CK 

0202 

0000‘S1 

0204 

5F00 

CALL 

K_LOCK 

0206 

0000* 

!  RESTORE  INPUT  PARAMETERS  l 

0208 

97F2 

POP 

R2,  @R15 

020A 

97F1 

POP 

Rl,  GR15 

!  GET 

G  AST  ENTRY  #  ! 

020C 

6118 

LD 

R8,  MM  HANDLE. ENTRY  NO 

020E 

0004 

0210 
0212 
0214 
0216 
0218 
021 A 
021C 
021E 
0220 
0222 
0224 
0226 
0228 
022A 
022C 


0B02 
0001 
5E0E 
0224' 
5484 
0018* 
2100 
0002 
5E08 
023C  ' 
0B02 
0002 
5E0E 
0238' 
5484 


!  READ  EVENTCOUNT  ! 

!  CHECK  WHICH  EVENT  #.  ! 
IF  R2 

CASE  #INSTANCE1  THEN 


LDL  RP.4 ,  G_AST.EVENT1  (38) 
LD  P.0,  #SUCCEEDED 
CASE  #INSTANCE2  THEN 


LDL  RR4,  G_AST. EVENT2 ( R8 ) 
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022E 

001C* 

0230 

0232 

2100 

0002 

LD 

R0 1 

^SUCCEEDED 

0234 

0236 

5E08 
023C  ' 

ELSE 

! INVALID  INPUT! 

0238 

023A 

2100 
005F  ■ 

LD 

R0, 

#1 NVALID_ INSTANCE 

FI 

!  NOTE:  NO  VALUE  IS  RETURNED  IF 


USER  SPECIFIED  INVALID  EVENT  »l 
!  SAVE  RETURN  VALUES  ! 

023C  91F4  PUSHL  <?R1S>,  RR4 
!  UNLOCK  G  AST  ! 

023E  7604  LDA  R4,  S_AST_LOCK 

0240  0000* 

0242  5F00  CALL  K  UNLOCK 

0244  0000* 

!  RESTORE  RETURN  VALUES  ! 

0246  95F4  POPL  RR4,  0R15 

0248  9E08  RET 

024A  END  MM  READ  EVENTCOUNT 
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024A  MM  ADVANCE  PROCEDURE 

*  DETERMINES  G  AST  OFFSET  FROM  * 

*  SEGMENT  HANDLE  AND  INCREMENTS  * 

*  THE  INSTANCE(EV5NT  #)  SPECIFIED  9 

*  BY  TEE  CALLER.  THIS  IN  EFFECT  * 

*  ANNOUNCES  THE  OCCURRENCE  OF  THE  * 

*  EVENT.  THE  NEW  VALUE  CF  THE  * 

*  EVENTCOUNT  IS  RETURNED  TO  THE  * 

v  CALLER.  * 

v  PARAMETERS :  * 

*  Pi:  HANDLE  POINTER  * 

*  R2:  INSTANCE  (EVENT  #) 

m m mmm w m m * * * * * * * w w w w ** mm # m m ** * »*» 

*  RETURNS:  * 

*  RR2 :  NEW  EVENTCOUNT  VALUE  * 


ENTRY 

!  SAVE  INPUT  PARAMETERS  ! 


024A 

93F1 

PUSH 

0R15,  R 1 

024C 

93F2 

PUSH 

0R15,  R2 

!  LOCK 

:  G  AST  ! 

024E 

7604 

LDA 

R47  g_ast_lock 

0250 

0000V 

0252 

5F00 

CALL 

K_L0CK 

0254 

0000V 

!  RESTORE  INPUT  PARAMETERS 

0256 

97F2 

POP 

R2,  PR15 

0258 

97F1 

POP 

HI,  0R15 

!  GET 

G  AST  OFFSET  ! 

025A 

6114 

LD 

R4,  MM  HANDLE. ENTRY 

025C 

0e04 

!  DETERMINE  INSTANCE  ! 

IF  R2 

025E 

0B02 

CASE 

#INSTANCE1  THEN 

0260 

0001 

0262 

5E0E 

0264 

027C  * 

0266 

5442 

LDL 

RR2,  G_AST.  EVENT1  (■ 

026e 

0018V 

026A 

1602 

ADD!  RR2,  #1 

026C 

0000 

026E 

0001 

!  SAVE  NEW  EVENTCOUNT  ! 

0270 

5D42 

LDL 

G_AST .EVENTl ( R4  )  ,  , 

0272 

0018V 

0274 

2100 

LD 

R0 ,  #SUCCEEDED 

0276 

0002 

0278 

5E08 

CASE 

#INSTANCE2  THEN 
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027 A  029E' 
02?C  0Be2 
027E  0002 
0280  5S0E 
0282  029 A  ' 
0284  5442 
0288  001C* 
0288  1602 
028A  0000 
028C  0001 

028E  5D42 
0290  001C* 
0292  2100 
0294  0002 
0296  5E08 
0298  02.91' 
029  A  2100 
029C  005F 


029E  7604 
02A0  0000* 
02A2  5F00 
02A4  0000* 
02A6  9E08 
02A8 


LDL  RR2,  G_AST . EVENT2 ( R4 ) 
ADDL  RR2.  #1 


!  SAVE  NEW  EVENTCOUNT  ! 

LDL  G_AST.EVSNT2(R4),  RR2 

LB  R0 ,  #SUCCEEDED 

ELSE  ! INVALID  INPUT! 

LD  R0,  #1NVALID_I NSTANCE 

FI 

!  NOTE:  AN  INVALID  INSTANCE  VALUE 
WILL  NOT  AFFECT  EVENT  DATA  ! 

!  UNLOCK  C-_AST  I 
LDA  R4 ,  G_AST_LOCK 

CALL  K_UNLOCK 

PET 

END  MM  ADVANCE 
END  DIST  MM 
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APPENDIX  D  -  GATE  KEEPER  LISTINGS 


Z8000ASM  2.02 

LOC  OBJ  CODE  STMT  SOURCE  STATEMENT 

KERN£L_GATE_KEEPER  MODULE 

$IIST0N  5TTT 

CONSTANT 

ADVANCE  CALL 
AWAIT  CALL 
CREATE  SEG  CALL 
DELETERS EG~CALL 
MAKE  XNOWN_CALL 
READ'CALL 
SM  SWAP  IN_CALL 

sm'swap'out  CALL 
TERMINATE  C ILL 
TICKET  CALL 
WRITE  CALL 

writeIn  call 

CRLF_CALL 
WRITE 
WRITSLN 
CRIF 
MONITOR 

REGISTER  BLOCX 
TRAP  CODE  OFFSET 
INVALID  KERNEL  ENTR? 


GLOBAL 

GAT£_KEEPEP_FNTRI 

LABEL 

EXTERNAL 

ADVANCE 

PROCEDURE 

AWAIT 

PROCEDURE 

CREATE  SEG 

PROCEDURE 

DELETE'S  EG 

PROCEDURE 

MAKE  KNOWN 

PROCEDURE 

read- 

PROCEDURE 

SM  SWAP  IN 

PROCEDURE 

SM'SWAP'OUT 

PROCEDURE 

TERMINATE 

PROCEDURE 

TICXET 

PROCEDURE 

KERNEL  EXIT 

LABEL 

INTERNAL 

SSECTION  KERNEL^GATB_ 

FROC 

=  1 
=»  2 
=  3 

=  4 
-  t 

=  6 
=  7 


8 

9 

10 
11 
12 
13 

®0FC8 

*0FC0 

S0FE4 

*A902 

32 

36 

*LAL 


SPRINT 

SPRINT 


CHAR! 

MSG! 


! CAP  RET /LINE  FEED ! 
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0000  GATE_KEEPER_MAIN  PROCEDURE 

ENT?T 

GATE  KEEPER  ENTRY  : 

!  SAVE  REGISTERS  ! 

0000  030F  SUB  R15.  *REGISTER  BLOCK 
0002  0020 

ee04  1CF9  LDM  (?R15,  Rl,  416 

0006  010F 

!  SAVE  NSP  ! 

0008  93F2  PUSH  GR15,  R2 

000A  7D27  LDCTL  R2,  NS? 

!  RESTORE  INPUT  REGISTERS  ! 

000C  2DF2  EX  R2«  «Rlb 

!  SATE  REGISTER  2  ! 

000E  93F2  PUSH  @815.  R2 

!  GET  SYSTEM  TRAP  CODS  ! 

0010  31F2  ID  R2,  R15(*TRAP  CODE  OFFSET) 

0012  0024 

!  REMOVE  SYSTEM  CALL  IDENTIFIER  FROM 
SYSTEM  TRAP  INSTRUCTION  ! 

0014  8C28  CLRB  RH2 

!  NOTE:  THIS  LEAVES  THE  USER  VISIBLE 
EXTENDED  INSTRUCTION  NUMBER  IN  R2  ! 

!  DECODE  AND  EXECUTE  EXTENDED  INSTRUCTION  ! 
IF  R2 

!  NOTE:  THE  INITIAL  VALUE  FOR  REGISTER  2 
WILL  BE  RESTORED  WHEN  THE  APPROPRIATE 
CONDITION  IS  FOUND  ! 

0016  0B02  CASE  #ADVANCE  CALL  THEN 
0018  0001 
001 A  5E0E 
001C  0028' 

001S  97F2  POP  P.2,  @815 

0020  5F00  CALL  ADVANCE 

0022  0000* 

0024  5E08  CASE  #AWAIT  CALL  THEN 
0026  010C  ' 

0028  0B02 
002A  0002 
002C  5E0E 
002E  003A ' 

0030  97F2  POP  R2,  (? Rl 5 

0032  5F00  CALL  AWAIT 

e034  0000* 

0036  5E08  CASE  #CF.EATE  SSG  CALL  THEN 
0038  010C ' 

003A  0B02 
003C  0003 
003E  5E0E 
0040  004C  ' 
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0042 

97F2 

POP 

R2,  0R15 

0044 

5E00 

CALL 

CPEATE_SEG 

0046 

0000* 

0048 

5E08 

CASE 

#DELSTF_SEG_CALL 

THEN 

004A 

010C  ' 

004C 

0502 

004E 

0004 

0050 

5E0E 

0052 

005E  ' 

0054 

9r?12 

POP 

R2,  (2R16 

0056 

5F00 

call 

DELETE_SEG 

0058 

0000* 

ee5A 

5E08 

case 

#MAKS_KNOWN_CAIL 

then 

005C 

010C' 

005E 

0502 

e06e 

0005 

0062 

5E0E 

0064 

0070' 

0066 

97F2 

pop 

R2,  8R15 

0068 

5F00 

cail 

MAO_KNOWN 

006A 

0000* 

0e6C 

5E08 

case 

#?.EAD_CALL  THEN 

006E 

010C  ' 

0070 

0502 

0072 

0006 

0074 

5E0E 

0076 

0082' 

0078 

97F2 

pop 

R2,  ORlb 

007A 

5F00 

call 

read 

007C 

0000* 

007E 

5E08 

CASE 

#SM_SWAP_IN_CALL 

then 

0080 

010C  ' 

0082 

0E02 

0084 

0007 

0086 

5E0E 

0088 

0e94' 

008A 

97F2 

POP 

P.2,  PR15 

008C 

5F00 

call 

SM_SWAP_IN 

006E 

0000* 

0090 

5S09 

case 

#SM_SWAP_OUT_CALL 

THE: 

0092 

010C  ' 

0094 

0E02 

0096 

0008 

0098 

5E0E 

009 A 

00A6  ' 

009C 

97F2 

POP 

P.2,  0R15 

009E 

5F00 

CALL 

SK_SWAP_OUT 

00A0 

0000* 

00A2 

5E08 

CASE 

#TERMINATE_CALL 

THEN 

00A4 

010C' 

00A6 

0502 
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nit  as  00  e9 
5S0E 

00AC  00B8  * 
00AE  97F2 
00B0  5F00 
00B2  0000* 
00B4  bi'08 
00B6  010C' 
00 B8  0E02 
00  BA  000A 
00BC  5E0E 
00BE  00CA  ' 
00 C0  9712 
00C2  5F00 
00C4  0000* 
00C6  5E08 
00C8  010C' 
00CA  0B02 
00CC  000B 
00CE  5S0E 
00D0  00DC  * 
00D2  97F2 
00D4  5F00 
00D6  0FC8 
00De  5E08 
001} A  010C' 
00DC  0B02 
00DE  000C 
00E0  5E0E 
00E2  00EE ' 
00E4  97F2 
00E6  5F00 
00E8  0FC0 
00EA  5E08 
00EC  010C' 
00 EE  0B02 
eeF0  eeeD 
00F2  5E0E 
00F4  0100' 
00F6  97F2 
00F8  5F00 
00FA  0FD4 
00FC  5E08 
00FE  010C' 


0100  7601 
0102  0100' 


POP  R2,  ORlb 
CALL  TERMINATE 

CASE  ^TICKET  CALL  THEN 


POP  R2,  (?Rlb 
CALL  TICKET 


CASE  #VRIT5  CALL  THEN 


POP  R2,  GRlb 
CALL  WRITE 


CASE  4WRITELN  CALL  THEN 


POP  R2 ,  C«Rlb 

CALL  WRITELN 

CASE  #CRLF  CALL  THEN 


POP  P2,  ORlb 
CALL  CRLF 

ELSE  ! INVALID  KERNEL  INVOCATION! 

!  RETURN  TO  MONITOR  ! 

!  NOTE:  THIS  RETURN  TO  MONITOR  IS 
FOR  STUB  USE  ONLY.  AN  INVALID 
KERNEL  INVOCATION  WOULD  NORMALLY 
RETURN  TO  USER.  ! 

LDA  PI,  $ 
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0104  2100  LD  ?.0,  #INVALID  KERNEL_ENT3Y 

0106  0BAD 

0108  5F00  CAIL  MONITOR 

0 10A  A902 

FI 

!  SAVE  REGISTERS  ON  KERNEL  STACK  ! 
!  SAVE  R1  ! 

010C  93F1  PUSH  GUI 5.  Rl 

!  GET  ADDRESS  OF  REGISTER  BLOCK  ! 
010E  34F1  LDA  Rl,  R15(#4) 

0110  0004 

!  SAVE  REGISTERS  IN  REGISTER  BLOCK 
ON  KERNEL  STACK.  ! 

0112  1C  19  LDK  PR1,  Rl,  #16 

0114  010F 

!  RESTORE  Rl  BUT  MAINTAIN  ADDRESS 
OF  REGISTER  BLOCK  ! 

0116  2DF1  E'X  Rl,  OR15 

!  SAVE  Rl  ON  STACK  ! 

0110  33F1  LD  R15<#4).  Rl 

011A  0004 

!  RESTORE  REGISTER  BLOCK  ADDRESS  ! 
011C  97F1  POP  Rl,  GRlb 

!  SAVE  VALID  EXIT  SP  VALUE  ! 

011E  33F1  LD  R15(#30),  Rl 

0120  001E 

!  EXIT  KERNEL  BY  MEANS  OF  HARDWARE 
PREEMPT  HANDLER  ! 

0122  5E08  JP  KERNEL  EXIT 

0124  0000* 

0126  END  GATE  KEEPER  MAIN 

END  KSRNEl  GATE  KEEPER 
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Z6000AS  M  2.02 

ioc  oe:  code 


STMT  SOURCE  STATEMENT 


USER_GATE  MODULE 

$LISTON  $TTY 


CONSTANT 

ADVANCE  CALL 
AWAIT  CALL 
CREATE  SEC  CALL 
DELETS~S£G  CALL 
MAKE  KNOWN-CALL 

read“call 

SM  SWAP  IN  CALL 

sm2swap"out  call 
terminate  call 

TICKET  CALL 
WRITE  CALL 
vriteln_call 

CRLF  CALL 


1 

2 

3 

4 
b 
6 
7 
t 

y 

10 

n 

12 

13 


GLOBAL 

^SECTION  USaR_GATE_PROC 


0000  ADVANCE  PROCEDURE 

;  v***w«*m********»«**v 

*  PARAMETERS:  * 

*  RlrSEGMENT  *  * 

*  R2 : INSTAN CE  ( ENTRY <0 * 

yurxrwtfmmwqiwtp’i'vwwww 

*  RETURNS:  v 

*  R0 '.SUCCESS  CODE  * 


EN'T'RT 

0000 

7F01 

SC  ^ADVANCE  CALL 

0002 

yE08 

RET 

0004 

END  ADVANCE 

000* 

AWAIT  PROCEDURE 

1 yyyyyyyyyyyyyyyyyyyyyyyy 

*  PARAMETERS: 

*  Rl:SEGMENT  # 

* 

*  R2: INSTANCE 

*  RR4 SPECIFIED  VALUE 

*  RETURNS: 

V 

*  P0 : SUCCESS  CODE 

ENTRY 
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0004  7F02 
000b  9E08 
0009 

0008 


000C  ?F04 
000E  9E08 
0010 

0010 


sc  # a wait  call 

END  AWAIT 

CREATE_SEG  PROCEDURE 


* 

PARAMETERS : 

3Jt 

Rl : MENTOR  SEG  NO 

* 

-V 

R2.-ENTRT  NO 

** 

R3:SIZ£ 

>JC 

V 

RR4  :CLASS 

0008  7F03 
000 A  9E08 
000  C 

000C 


*  RETURNS:  * 

*  R0:SOCCESS  CODE  * 

W  W  VM  V  W  WV  W  W  W»«c  W  1 

ENTRY 

SC  #CREATE  SEC-  CALI 
RET 

ENT  CREATE  SEG 


0010  7F05 
0012  9E00 
0014 


DELETE_S  EG  PROCEDURE 

*  PARAMETERS :  * 

*  R1:ME’NT0R_SEG_N0  * 

388  R2:ENTRY_N0  * 

*  RETURNS:  * 

*  R0: SUCCESS  CODE  * 

ENTRY 

SC  #DELETE  SEG  CALL 

RET 

END  DELETE_SEG 

MAKE_KN0WN  PROCEDURE 
» wjsmf  w 

*  PARAMETERS:  * 

*  Rl: MENTOR  SEG  NO  * 

*  R2 : ENTRY  NO  * 

*  R3:ACCESS  DESIRED  * 

V  W  Kt  V  V  V  *  V  W  W  V  W «<»*  M  M  J?  «V 

*  RETURNS:  * 

*  R0 : StTC CESS  CODE  * 

*  Rl: SEGMENT  #  * 

*  R2 : ACCESS  ALLOWED  * 

ENTRT 

SC  #MAKE  KNOWN  CALL 

RET 

END  MAKE  KNOWN 


"V7- 


0014  READ  PROCEDURE 


*  PARAMETERS:  * 

*  R1 :S  EGMENT  #  * 

*  p2 : INSTANCE  * 

K9V9999  99  99V  9  9  ¥V  99  WWW 

*  RETURNS :  * 

*  RO: SUCCESS  CODE  * 

*  RR4 : EVENT COUNT  * 

umiiivw)?******??**^???*?? ! 

ENTRY 

0014  7E06  SC  ffREAD  CALL 

0016  9E09  RET 


001S  END  READ 

0018  SM  S  WAP_IN  PROCEDURE 

v  PARAMETERS:  * 

*  Rl:  SEGMENT  »  v 

999999999999999999999999 

*  RETURNS:  * 

»  R0:SUCCESS  CODE  - 

9  99999999999999999999999  I 

ENTRY 

0018  7F07  SC  #SM  SWAP  IN  CALL 

001 A  9E08  RET 

001C  END  SM  SWA?  IN 


001 C 


001C  7F08 
001E  9E08 
0020 


SM_SWAP_OUT  PROCEDURE 

f 999999999999999999999999 

*  PARAMETERS:  * 

*  Rl: SEGMENT  *  * 

999999999999999999999999 

*  RETURNS:  * 

*  R0:  SUCCESS  CODE  * 

999999999999999999999999  ! 

ENTRY 

SC  #SM_SWAP_OUT_CALL 
RET 

END  SM  SWAP  OUT 


0020  TERMINATE  PROCEDURE 

t  999999999999999999999999 

*  PARAMETERS:  * 

*  Rl :  SEGMENT  *f  v 

999999999999999999999999 

*  RETURNS:  * 

*  ?0:SUCCESS  CODE  * 

999999999999999999999999 { 

ENTRY 

0020  7P09  SC  ^TERMINATE  CALL 
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0022  9E09 
0024 


PJfi? 

Nr  TERMINATE 


0024  TICKET  PROCEDURE 

j  if  wft  ifififw  iffcffif  ifffifffffifififffff  if 

*  PARAMETERS:  * 

*  Pi :S EGMENT  *  * 

WWWV  WW  Wfflfff  if  If  if  V  if  if  if  vw 

*  RETURNS:  * 

*  R0:SUCCESS  CODE  * 

*  RR4 : TICKET  7ALUE  * 

ifififjfififjfjfifjfjfififififififjfTfiftfifif  >f  | 

ENTRY 


0024 

7F0A 

SC  ^TICKET  CALL 

e026 

9  £09 

RET 

0029 

END  TICKET 

0028 

RITE  PROCEDURE 

ENTRY 

0029 

7F0B 

SC  *WR ITE_CALL 

002A 

9E08 

RET 

Z02C 

END  WRITE 

002C 

WRITELN  PROCEDURE 

ENTRY 

0  02  C 

?F0C 

SC  #WR 1T£LN_CALL 

002E 

9E09 

RET 

0030 

END  WRITEIN 

0030 

CRLF  PROCEDURE 

ENTRY 

0030 

7F0D 

SC  *CRLF  CALL 

0032 

9E09 

RET 

0034 

END  CRLF 

APPENDIX  E  -  BOQTSTRAP_ LOADER  LISTINGS 


Z8000ASM  2.02 

LOC  OBJ  CODE  STMT  SOURCE  STATEMENT 

BOOTS TRAP_LOADER  MODULE 

SLISTON  $TTY 
CONSTANT 


,  ********  SYSTEM  PARAMETERS  ******** 


NR  CPU 
NR~VP 

NP.  AVAIL  VP 

maI  dbr  nr 

STACK  SEG 
STACK~SEG  SIZE 

stack~bloCk 


2 

NR  CPU*4 

nr~c?u*2 

10“ 

1 

*1 00 

STACK_SEG_SIZE/2*b 


j 


!  *  *  OFFSETS  IN  STACK  SEG  *  *  ! 
STACK  BASE  :*  STACK  SEG  SIZJt-%10 

STATUS  REG  BLOCK : *  STACK  SEG~S IZE-%10 
INTERRUPT  FRAME  :=  STACK  BASS-4 


INTERRUPT  REG 
N_S  P 
F~C_W 

i  ******  SYSTEM 
ON 
OFF 
READY 
NIL 

INVALID 
KERNEL  FCW 
AVAILABLE 
ALLOCATED 
SC_OFFSET 

TTPE 

MESSAGE  ARRAY 
ADDRESS  WORD 
MM  VP  ID  WORD 
VP~INDEX 
MSS  INDEX 


:=  INTERRUPT  FRAME-34 
:=  I NTERRUPT~R EG-2 
:*  STACK_SEG_SIZS-*E 

CONSTANTS  ******  ! 

:=  SFFFF 
:  =  0 
:=  1 

:=  %FFFF 
:=  £EEEE 
:=  X5000 
:=  0 
:=  %7J 
:=  12 


lib  BYTEJ 


INTEGER 

INTEGER 


17? 


MSG  TABLE  RECORD 
[  "!SG  MESSAGE 

SENDER  7 P  INDEX 

NEXT  MSG  MSG  INDEX 

FILLER  ARRAY  lb,  WORD] 

J 

"P  TABLE  RECORD 

[  DBP.  ADDRESS 

PR  I  WORD 

STATE  WORD 

IDLE  FLAG  WORD 

PREEMPT  WORD 

PHTS_PROCESSOR  WORD 
NEXT  READY  VP  VP  INDEX 
MSG  LIST  “  MSG  INDEX 
EYT"ID  WORD 

FILLER  1  ARRAY  17,  WORDJ 

J 

EXTERNAL 

GET_DBR  ADDR  PROCEDURE 

CREATE_STACA  PROCEDURE 

LIST  INSERT  PROCEDURE 

ALLOCATE_MMU  PROCEDURE 

UPDATE  MMU_IMAGE  PROCEDURE 
MM_ALLOCATE  PROCEDURE 

MM_ENTRY  LABEL 

IDLE  ENTRY  LABEL 

PREEMPT_PET  LABEL 

BOOTS TRAP _ ENTRY  LABEL 
GATE  KEEPER  ENTRY  LABEL 
NSXT_BLOCK  WORD 

MM  CPU  TPL  ARRAY [NR  CPU  MM_VP  IDJ 


VPT  RECORD 

[  LOCK  WORD 

RUNNING  LIST  ARRAY  [NR  CPU  WORDJ 
READY  LIST  ARRAY (NR'CPU  WORDJ 
FREE  LIST  MSG  INDEX 

VIRT~INT  VEC  ARRAY  [1,  ADDRESS] 

FILLER  2  WORD 

VP  ~  ARRAY  [NR  VP,  VP  TABLEJ 

MSG  C  ARRAr  TnR  VP,  MSG_TABL£j 


J 


EXT  VP  LIST  ARRAY  [NR  AVAIL  VP  WORD] 
NEXT_AVAIL_MMU  ARRAY  lMAX_D£R~NR  BITE] 

PRDS  RECORD 

IPHYS  CPU  ID  WORD 
LOG  CPU  ID  INTEGER 
VP  NR  ~  WORD 

IDlE  VP  VP  INDEX] 


INTERNAL 

SSECT ION  LOADER_DATA 

!  NOTE:  ThESS  DECLARATIONS  WILL  NOT  WOPK 
IN  A  TRUE  MULTIPROCESSOR  ENVIRONMENT  AS 
THEY  ARE  SUBJECT  TO  A  "CALL."  THEY  MUST 
BE  DECLARED  AS  A  SHARED  GLOBAL  DATABASE 
WITH  "RACE”  PROTECTION  (E.G.,  LOCK).  ! 

0000  NEXT  AVA IL_VP  INTEGER 

0002  N£XT~EXT  VP  INTEGER 
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ee00 


e000  4D05 

0002  0000s*8 

0004  FFFF 


^SECTION  LOADER  I NT 
INTERNAL 

BOOTS TRAF  PROCEDURE 

*  CREATES  KERNEL  PROCESSES  AND  * 

*  INITIALIZES  KERNEL  DATABASES . * 

*  INCLUDES  INITIALIZATION  OF  * 

*  VIRTUAL  PROCESSOR  TABLE,  * 

*  EXTERNAL  VP  LIST,  AND  MMU  * 

*  IMAGES.  ALLOCATES  IMAGE  * 

*  AND  CREATES  KERNEL  DOMAIN  * 

*  STACK  FOR  KERNEL  PROCESSES.  * 


ENTRY 

!  INITIALIZE  PROS  AND  MMU  POINTER  ! 

!  NOTE:  THE  FOLLOWING  CONSTANTS  ARE 
ONLY  TO  BE  INITIALIZED  ONCE.  THIS 
WILL  OCCUR  DURING  SYSTEM  INITIALIZATION! 
LD  PRDS.PHYS  CPU  IE,  #'?FFFF 


!  NOTE:  LOGICAL  CPU  NUMBERS  ARE  ASSIGNED 
IN  INCREMENTS  OF  2  TO  FACILITATE  INDEXING 
(OFFSETS)  INTO  LISTS  SUBSCRIPTED  Bv 
LOGICAL  CPU  NUMBER.  ! 


»  « 

0006 

4D05 

LD 

PRDS.LOG_CFU_ID,  #2 

0008 

0002* 

000  A 

0002 

4  l 

- 

! 

SPECIFY  NUMBER  OF  VIRTUAL  PitCCESS 

ASSOCIATED  WITH  PHYSICAL  CPU.  f 

.  V 

000C 

4D05 

LD 

PRDS . VP_NR ,  #2 

•Mt 

0e0E 

0004* 

0010 

0002 

* 

0012 

4D08 

CLR 

NEXT.BLOCK 

i 

0014 

0000s* 

* 

0016 

4D08 

CLR 

N  EX  T_  A  V  A I  L_  V  P 

T 

4- ' 

0018 

0000' 

t 

001 A 

4D08 

CLR 

N  EXT_EXT_VP 

001C 

0002' 

001E  7D15 


0020  0101 
0022  000C 

0024  0D15 
0026  5000 


!  ESTABLISH  GATS  KEEPER  AS  SYSTEM  CALL 
TRAP  HANDLER  ! 

!  GET  BASE  OF  PROGRAM  STATUS  AREA  ! 

LOCTl  Rl,  PSAP 

!  ADD  SYSTEM  CALL  OFFSET  TO  PSA  BASE  AD DR  ! 
ADD  Rl,  #SC_OFFSET 

!  STORE  KERNEL  FCW  IN  PSA  ! 

LD  OFl,  #KSRNfiL_FC W 


*0? 


!  STORE  ADDRESS  0?  SATE  KEEPER  IN  PROGRAM 


STATUS 

AREA 

AS  SYSTEM  TRAP  HANDIER 

; 

0028 

A911 

INC 

Rl, 

*2 

002  A 

0D15 

LD 

0R1 

,  #GATE_K5EPBR_EN 

TRY 

002C 

0000V 

002E 

8D18 

CL? 

?.l 

!  NE  T_AVAIL_MMU 

INDEX 

; 

1  INITIALIZE 

ALL  MMrJ  IMAGES  AS 

AVAILABLE 

SET_MMU_MAP 

• 

• 

DO 

0030 

4C15 

LDE 

NEXT  AVAIL  MMU(Rl), 

#AVAILABLE 

0032 

0000V 

0034 

0000 

0036 

A910 

INC 

Rl, 

#1 

!  CHECK  FOR 

END  OF  TABLE  ? 

0038 

0E01 

CP 

Rl, 

*max_dbr_nr 

003A 

000A 

003C 

5E0E 

IF  EO 

THEN 

exit  From  set_mmu 

_MAP 

FI 

003E 

0044' 

0040 

5E08 

0042 

0046' 

0044 

E8F5 

OD 

!  CREATE  MEMOR*  MANAGER  PROCESS  ! 

45046  2103  LD  R3,  #STACX  BLOCK 

0048  0001 

!  ALLOCATE  AND  INITIALIZE  KERNEL 
DOMAIN  STACK  SEGMENT  1 

004A  5E00  CALL  MM  ALLOCATE  !R3:  #  OF  FLOCKS 

004C  0000* 

RETURNS 

R2  :  START  ACER ! 

004E  A121  LD  Rl,  R2 

0050  2103  LD  R3 ,  »KERNEL_FCW 

0052  5000 

0054  7604  LDA  R4,  MM_ENTRY 

0056  0000* 

005e  6105  LD  R5,  %??¥?  INSP! 

005A  Fill 

005 C  7 606  LDA  R6,  PREEMPT_RET 

005E  0000* 

0060  93P1  PUSH  PR15,  Rl  !SAVE  STACK  ADIR! 

0062  030F  SUB  R15,  *8 

0064  0008 

0066  1CF9  LDM  9R15f  R3 ,  #4 

0068  0303 

006A  A1F0  LD  R0,  R15 

\  NOTE:  ARGLIST  FOR  CREATE  STACK  INCLUDES 
5ERNEL_FCW ,  INITIAL  IC ,  NSP,  AND  INITIAL 
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RETURN  POINT.  ! 

006C  5F00  CALI  CREATE  STACK  !  (R0:  ARGUMENT  PTR 

006E  eee0* 

Rl:  TCP  OF  STACK 
R2-R14 :  INITIAL 
REG. STATES  ! 

0070  010F  ADD  R15.  *8  !  OVERLAY  ARGUMENTS! 

0072  0008 

!  ALLOCATE  MMU  IMAGE’  ! 

0074  5F00  CALL  ALLOCATE  MMU  ! RETURNS: 

0076  0000* 

(  R0 1  EBR  )  * 

0078  2iei  LD  Rl,  fcSTACK  SEG  !  SEGMENT  NO.  ! 

007 A  0001 

007C  97F2  POP  R2 ,  OR 15  ! GET  STACK  ADER ! 

007E  2103  LD  P.3 ,  #0  !  WRITE  ATTRIBUTE  ! 

0080  0000 

!  SPECIFY  NUMBER  OF  BLOCKS.  COUNT  STARTS 
FROM  ZERO.  (I.E. ,1  BLOCK=0,  2=1,  ETC.)! 

0082  2104  LD  R4,  #STACK  BIQCK-1 

0084  0000 

!  SAVE  DBR  #  ! 

0086  93F0  PUSH  0R15,  R0 

!  CREATE  MMU  ENTRY  FOR  MM  STACK  SEGMENT  ! 

0088  5F00  CALL  UPDATE  MMU  IMAGE  !(R0:  DBR  * 

008A  0000* 

Rl:  SEGMENT  * 

R2:  SEG  ADDRESS 
R3 :  SEG  ATTRIBUTES 
P.4:  SEG  LIMITS)  ! 

!  RESTORE  DBR  ft  ! 

008C  97F0  POP  R0,  0R15 

!  GET  ADDRESS  OF  MMU  IMAGE  ! 

008S  5F00  CALL  GET  DBR  ADDR  !  (R0:  DER  ») 

0090  0000* 

RETURNS: 

*  'Hi:  DBR  ADDRESS)  ! 

!  PREPARE  VP  TABLE  ENTRIES  FOR  MM  ! 


0092 

0094 

2ie2 

0002 

LD 

R2  , 

#2 

!  PRIORITY  ! 

0096 

0098 

2105 

0000 

LD 

R5 , 

#OFF 

!  PREEMPT  ! 

009A 

009C 

2106 

0000 

LD 

R6 , 

#OFF 

!  KERNEL  PROCESS  ! 

!  UPDATE  VPT  ! 

009E  5F00  CALL  UPDATE  VP  TABLE  !(R1:  DBR 

00A0  01CA  ' 


P.2 :  PRIORITY 


Rb :  PREEMPT  FLAG 
R6:  EXT  VP  FLAG) 
RETURNS': 

R9:  VP  ID  ! 


!  INITIALIZE  MM  CPU  TBL  IN  DISTRIBUTED  MEMORY 

MANAGER 

WITH  VP  ID  OF  MM  PROCESS  ! 

!  GET  LOGICAL  CPU  #  ! 

00A2 

610A 

LD  R10,  PRDS .LOG  CPU  ID 

00A4 

0002* 

00A6 

6FA9 

LD 

MM_CPU_T£L(R10) ,  R9 

00A6 

0000* 

!  CREATE 

IDLE  PROCESS  ! 

00AA 

2103 

LD 

R3,  #S TAC K_B IOCK 

00AC 

0001 

00AE 

5F00 

CALL 

MM_ALLOCATE  !R2 :  #  OF  BLOCKS 

00S0 

0000* 

RETURNS 

R2:  START  A DDR ! 

00E2 

A121 

LD 

Rl*  R2 

00B4 

2103 

LD 

R3 ,  #KERNEL_FCW 

00B6 

5000 

00B8 

7604 

LDA 

R4 ,  IDLS_£NTRY 

00BA 

0000* 

00BC 

2105 

LD 

R5,  #SFFFF  ! NS  P ! 

00BE 

FFFF 

00C0 

7606 

LDA 

P.6 ,  presmpt.ret 

00C2 

0000* 

00C4 

93F1 

PUSH 

0R15,  Rl  ! S AVE  STACK  ADDR ! 

00C6 

030F 

SUB 

Rl5 ,  #9 

00C8 

0008 

00CA 

1CF9 

LDM 

0R15,  R3,  *4 

00CC 

0303 

00CE 

A1F0 

LD 

R0,  R15 

!  INITIALIZE  IDLE  STACK  VALUES  ! 

00D0 

5F00 

CALL 

CR£ATE_STACK  !  (R0:  ARGUMENT  PT* 

00D2 

0000* 

Rl  :  TOP  01  STACK 

R2-R14 :  INITIAL 

REG.  STATES  ' 

00D4 

010F 

ADD 

R15,  *8  ! OVERLAY  ARGUMENTS! 

0006 

0008 

!  ALLOCATE  MMU  IMAGE  FOR  IDLE  PROCESS  ! 

0008 

5F00 

CALL 

ALLOCATE_MMU  !  RETURNS  R0:DBP.  #  ! 

00DA 

0000* 

!  PREPARE 

IDLE  PROCESS  *MU  ENTRIES  ! 

00DC 

2101 

LD 

Rl,  #STACK_SEG  !  SEG  #  ! 

00OE 

0001 

00E0 

97F2 

POP 

R2,  OR lb  ! GET  STACK  ADDS! 

00E2  21453  LD  R3,  #0  !  4IRITE  ATTRIBUTE  ! 

00E4  0000 

00E5  2104  LD  R4 ,  #STACK  BLOCK-1  !  BLOCK  LIMITS  ! 

00E8  0000 

!  SAVE  DBR  n  ! 

00EA  93F0  PUSH  <?R15,  R0 

!  CREATE  MMU  IMAGE  ENTR*  ! 

00SC  5F00  CALL  UPDATE  MMU  IMAGE  !(R1:  SEGMENT  * 

00EE  000e* 

R2 :  SEG  ADDRESS 
P3:  SEG  ATTRIBUTES 
R4:  SEG  LIMITS  )  ! 

!  RESTORE  DBR  #  ! 

00F0  97F0  POP  R0,  l*»Rl5 

!  GET  MMU  ADDRESS  ! 

00F2  5F00  CALL  GET  DBR  ADDR  !  (P.0:  L BP  *) 

00F4  0000* 

RETURNS 

(Ri:  DBR  ADDRESS)  ! 

!  PREPARE  7PT  ENTRIES  FOR  IDLE  PROCESS  ! 

00F6  2102  LD  R2 ,  #0  !  PRIORITY  ! 

00F8  0000 

00FA  2105  LD  R5 ,  #OFF  !  PREEMPT  ! 

e0FC  0000 

00FE  2106  LD  P.6 ,  #OFF  !  KERNEL  PP.OC  ! 

0100  0000 

!  CREATE  VPT  ENTRIES  ! 

0102  5F00  CALL  UPDATE  VP_TABLE  !(R1:  DBR 

0104  01CA' 

R2 :  PRIORITY 
R4 :  IDLE  FLAG 
R5 :  PREEMPT 
36:  EXT  VP  FLAG' 
RETURNS  7 
R9:  VP  ID  ! 

!  ENTER  VP  ID  OF  IDLE  PROCESS  IN  PRDS  ! 


0106 

6F09 

LD 

PRDS  .IDLE_VP 

,  R9 

0108 

0006* 

; 

INITIALIZE  IDLE  VP'S 

! 

010A 

2102 

LD 

R2,  #1 

!  PRIORITY  ! 

010C 

0001 

010E 

2ie5 

LD 

R5  •  #ON 

!  PREEMPT  ! 

0110 

FFFF 

0112 

2106 

LD 

R6,  #ON 

! NON-KERN  EL  PROC ! 

0114 

FFFF 

0116 

6100 

LD 

R0  ,  PRDS  .VP__ 

NR 

0118 

0004* 

!  INITIALIZE  VP  VALUES  ! 


DO 

011 A 

5F00 

CALL 

U?DATE_VP_TA3LE  !(Rl:  EBR 

011C 

01CA' 

R2 :  PRIORITY 

R4:  IDLE  FLAG 

R5:  PREEMPT 

R6 :  EXT  VP  FLAG) 
RETURNS? 

R9:  VP  ID  ! 

011E 

AB00 

DEC 

R0,  #1 

0120 

0S00 

CP 

R0  ,  #0 

0122 

0000 

0124 

5E0S 

IF  EC 

! ALL  VP'S  INITIALIZED!  THEN 

0126 

012C  ' 

0128 

5E08 

SXI 

m 

X 

012A 

012E ' 

FI 

012C 

E8F6 

OD 

!  iNlTILfZE  VPT  HEADER  ! 

!  GET  LOGICAL  CPU  NUMBER  ! 

012E 

6102 

LD 

R2,  PRDS .LOG_CPU_ID 

0130 

0002* 

0132 

4D05 

LD 

VPT. LOCK ,  #OFF 

0134 

0000^ 

0136 

0000 

0138 

4D25 

LD 

VPT.RUNNING_LIST(R2) .  #NIL 

013A 

0002* 

013C 

FFTT 

013E 

4D25 

LD 

VPT.fiEADI_LIST(R2) •  #NIL 

0140 

0006V 

0142 

FFFF 

0144 

4D08 

CLR 

VPT ,FREE_LIST  'HEAD  CF  MSG  LIST! 

0146 

000A* 

'.THREAD  VP 

'S  BY  PRIORITY  AND  SET  STATES  TO  READY 

0148 

8D28 

CLR 

R2  JSTART  WITH  VP  #1! 

THREAD: 

DO 


014A 

014C 

610D 

0002* 

LD 

R13,  PRDS.LOG_CPU_ID 

014E 

0150 

7bD3 

0006* 

LDA 

R3,VPT.READT_LIST(R13) 

0152 

0154 

7604 

001C* 

LDA 

R4f  VPT.VP. NEXT_READY_VP 

0156 

0158 

7605 

0012* 

LDA 

R5, VPT. VP. PRI 

ei5A 

015C 

7606 

0014* 

LDA 

R6, VPT. VP. STATE 

015E 

2107 

LD 

R7,#READY 

0160 

0001 

!  SAVE 

OBJ  ID  ! 

0162 

93F2 

PUSH 

0R15,  R2 

0164 

5F00 

CALL 

LIST  INSERT  !R2:  OBJ  ID 

0166 

0000* 

33:  LIST  HEAD  PTR  ADD R 

ha:  nsxt"obj  Pth 

P.5:  PRIORITY  PTR 
?.6:  STATE  PTR 
P.7:  STATE"  ! 


!  P.ES 

TORE  OBJ  ID  ! 

0166 

97F2 

POP 

R2 ,  OR 15 

ei6A 

0ie2 

ADD 

R2,  #S IZEOF  VP_TABLE 

016C 

0020 

016E 

0B02 

CP 

?2,  # ( NR_VP  *  (SIZEOF  YP_ TABLE )  ) 

0170 

0100 

0172 

5E0E 

IF  10 

THEN  EXIT  FROM  THREAD  FI 

0174 

017A ' 

0176 

5E08 

0179 

017C' 

017A 

E8E7 

OD 

!  INITIALIZE  VP  MESSAGE  LIST  ! 

!  NOTE:  ONL*  THE  THREAD  FOR  THE  MESSAGE 
LIST  NEED  BE  CREATED  AS  ALL  MESSAGES 
ARE  INITIALLY  AVAILABLE  FOR  USE.  THE 
INITIAL  MESSAGE  VALUES  WERE  CREATED 
FOR  CLARITY  ONLY  TO  SHOW  THAT  THE 
MESSAGES  HAVE  NO  USABLE  INITIAL  VALUE! 

017C  9D19  CLP  R1 

MSG  1ST  INIT: 

"f  NOTE:  R1  REPRESENTS  CURRENT  ENTRY  IN 

MSG_LISTf  R2  REPRESENTS  CURRENT  POSITION 
IN  MSG  LIST  ENTRY,  AND  R3  REPRESENTS 
NEXT  ENTRT  IN  *SG  LIST.  ! 

DO 


017E 

A112 

LD 

R2,  R1 

0180 

A123 

LD 

R3 ,  R2 

0162 

0103 

ADD 

R3 •  #S IZEOF  MESSAGE 

0184 

0010 

FILL 

MSG: 

DO" 

0186 

4D25 

LD 

VPT ,MSG_C . MSG ( R2 ) ,  #INVALID 

0188 

0110* 

018A 

SEES 

eiec 

A921 

INC 

R2,  #2 

018E 

8B32 

CP 

R2,  R3 

0190 

5E0E 

IF 

EO  THEN  EXIT  FROM  FILL  MSG  FI 

0192 

0i9e ' 

0194 

5E0S 

18b 


ms 


0196 

019A  * 

0iye 

ESF6 

OD 

0 19A 

4Dlb 

LD 

VPT.MSG_O.SENDER(Rl) .  #NIL 

0iyc 

0120* 

019S 

FFFF 

01A0 

A112 

LD 

R2,  R1 

01A2 

0101 

ADD 

Rl,  ffSIZEOF  MSG_TABLE 

01A4 

0020 

eiA6 

0E01 

CP 

Rl,  #S IZEOF  MSG_TA£LE*NR_V? 

01A9 

0100 

IF  EC 

01AA 

5E0E 

THEN 

01AC 

01BC' 

01AS 

4D25 

LD 

VPT .MSG_0 . NEXT_*SG (R2 ) ,  #NII 

01B0 

0122* 

01B2 

FFFF 

01B4 

5E08 

EXIT 

FROM  MSG_LST_INiT 

01B6 

01C2  0 

01B8 

5E0e 

ELSE 

01BA 

01C0' 

01BC 

6F21 

LD 

7PT.MSG_0.NEXT_MSG(R2) ,  Rl 

01BE 

0122* 

FI 

01C0 

ESDE 

OD 

!  GST  LGGICAL  CPU  #  FOR  USE 
Br  ITC  GET WORK .  ! 

01C2  S10D  LD  R13,  PRDS.LOG  CPU  ID 

01C4  ee02* 

!  BOOTSTRAP  COMPLETE  ! 

!  START  SYSTEM  EXECUTION  AT  PREEMPT  ENTRV 
!  POINT  IN  ITC  GETWORX  PROCEDURE  ! 

01C6  5E08  J?  BOOTSTRAP  ENTRY 

01C8  0000* 

01CA  END  BOOTSTRAP 


01CA  UPDATE  VP  TABLE  PROCEDURE 


w 

INITIALIZES  VPT  ENTRIES 

V 

VW  WWWW&VWVVW  MW  W  WW  V  W  V 

* 

REGISTER  USE: 

¥ 

¥ 

PARAMETERS : 

¥ 

¥ 

Rls  DBR  ADDRESS 

¥ 

V 

R2 :  PRIORITY 

¥ 

V 

R5:  PREEMPT  FLAG 

¥ 

V 

Rti :  EXTERNAL  7P  FLAG 

¥ 

V 

RETURNS: 

¥ 

jgs 

R9:  ASSIGNED  VP  ID 

¥ 

¥ 

LOCAL  VARIABLES : 

¥ 

* 

P.7:  LOGICAL  CPU  # 

¥ 

R8 :  EXT  VP  LIST  OFFSET 

¥ 

** 

R9 :  VPT_OFFSET 

¥ 

WWWWW WWW Ktww wwww  f 

ENTRY 

1 

GET  OFFSET  IN  VPT  FOR  NEXT  ENTRY  ! 

eiCA 

6109 

LD 

R9,  NEXT_AVAIL_VP 

01CC 

0000' 

01CE 

6F91 

LD 

VPT .VP .DBR (Ry )  ,  R1 

01D0 

0010» 

01D2 

6F92 

LD 

VPT.VP.PRI  (P.9) ,  R2 

01D4 

0012^ 

01D6 

6F96 

LD 

VPT . VP . IDLE_FLAG ( R9 ) 

,  R6 

01D8 

0016V 

01DA 

6F95 

LD 

VPT .VP .PREEMPT (R9 ) , 

P.5 

01DC 

0018V 

01DE 

6107 

LD 

R7 ,  PRDS .L0G_CPU_ID 

01E0 

0002V 

0 1E2 

6F97 

LD 

VPT.VP.PHYS_PRCCESSO 

R  (  R9  ^ ,  R7 

01E4 

001AV 

01E6 

4D95 

LD 

VPT. VP. NEXT  READY  VP(R9),  NIL 

01E8 

001CV 

01EA 

FFFF 

01EC 

4D95 

LD 

VPT.VP.MSG_LIST(R9), 

#NII 

01EE 

001Ev 

01F0 

FFFF 

;  i 

CHECK  EXTERNAL  VP  FLAG  ! 

01F2 

0B06 

CP 

R6 ,  #0N 

01F4 

FFFF 

IF  EO  ! EXTERNAL  VP! 

01F6 

bE0E 

THEN  !  VP  IS  TC  VISIBLE  ! 

01F8 

0210' 

01FA 

6108 

LD  R8 .  NEXT  EXT  VP 

01FC 

0002' 

!  INSERT  ENTRY  IN  EXTERNAL  VP  LIST  ! 
LD  EXT_VP  LIST (R8 ) .  R9 


iee 


01FE  5F89 


0200  0000* 

0202  6F98 

LD 

VPT. 7P.EXT_ID(R9) ,  Re 

0204  0020* 

0206  A981 

INC 

R8 ,  #2 

0208  6Fe8 

LD 

NSXT_EXT_VP,  R8 

020A  0002 ' 

020 C  5E08 

ELSE  ! VP  BOUND  TO  XEPNJSL  PROCESS! 

e20£  0216  ' 

0210  4D05 

LD 

VPT  .  VP .EXT_ID,  #NIL 

0212  0020* 

e214  FFFF 

FI 

0216  A19A 

LD 

Rl0 ,  P9 

0218  010A 

ADD 

P.10,  #S I ZSOF  VP_TAELE 

021A  0020 

021C  6F0A 

LD 

NEXT_AVA1L_VP,  H10 

021 E  0000' 

0220  9E08 

RET 

0222 

END  UPDATE 

VP  TABLE 

END 

BOOTSTRAP- 

LOADER 
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APPENDIX  F  -  LIRRARK  FUNCTION  LISTINGS 


Z8000ASM  2.02 

LOC  OBJ  CODE  STMT  SOURCE  STATEMENT 


L I 2RARV_ FUNCTION  MODULE 
SLISTON  $TTT 


CONSTANT 

KERNEL  FCW  := 
STACK  SEG  SIZE  :  = 
STACK  "BASE  :  = 
STATUS  REG  ELOCK:= 
INTERRUPT  FRAME  := 
InTERRUPT~REG  := 
N  S  P  ~  :  = 
NIL  :  = 


%5000 

%icse 

STACK  SEG  SIZi-%10 
STACK  SEG  SIZE-tie 
STACK_PAS  1-4 
INTERRUPT  FRAME-34 
INTERRUPT" REG-2 
'fcFFFF 


0000 


$ SECTION  LIB  PPOC 
GLOBAL 

LIST_1NSERT  PROCEDURE 

t  J?>)C WW VWVVVVVV ****** *»>*>*:(« 

*  INSERTS  OBJECTS  INTO  A  LIST  * 

*  BY  ORDER  OF  PRIORITY  AND  SETS  * 

*  ITS  STATS  * 

VV  VW  WWVW^  W  WV  WV  WW  WW  V 

*  REGISTER  USE:  * 


V 

PARAMETERS : 

V 

V 

R2: 

OEJECT  ID 

V 

V 

R3: 

READ  OF  LIST 

PTR  ADDR 

* 

3?: 

R4 : 

NEXT  OBJ  PTE 

ADDR 

* 

V 

R5: 

PRIORm'PTR 

ADDR 

a? 

* 

R6 : 

STATE  PTR  ADDR 

* 

R7: 

OBJECT  STATE 

* 

* 

LOCAL  VARIABLES: 

* 

R8: 

READ  OF  LIST 

.PTR 

* 

V 

R9: 

NEXT  OBJ  PTR 

* 

V 

R10 

:  CURRENT_OBJ 

PRIORITY 

M 

ace 

Rll 

:  NEXT  OBJ  PRIORITY 

¥ 

JJtW  stew  W  WWW  WWW*  i*>(t  5JS1*  **«>!«  W  ¥¥*??  » 


ENTRY 


!  GET  FIRST 

OBJECT  IN  LIST  ! 

0000 

2138 

LD 

R8 ,  PR3 

0002 

0B0e 

CP 

R8,  *NIL 

0004 

FFFF 

0006 

5E0E 

IF  EO  '.LIST 

IS  EMPTY!  TEEN 

0008 

0018' 

!  PLACE  OBJ 

AT  HEAD  OF  LIST  ! 

000A 

2F32 

LB 

OR  3,  R2 

000C 

7449 

LDA 

R9 ,  R4(R2) 

000E 

0200 

0010 

0D95 

LD 

PR9 ,  «NII 

0012 

FFFF 

0014 

5E08 

ELSE 

0016 

005A  ' 

!  COMPARE  OBJ  PRI  WITH  LIST  HEAD  PRI 

0018 

715A 

LD 

HI 0 ,  Rb(R2)  ! OBJ 

PRI ! 

001 A 

0200 

001C 

715B 

LD 

Rll,  P5(c8)  ! HEAD 

PRI! 

001E 

0800 

0020 

8BBA 

CP 

R10,  Rll 

0022 

5E02 

IF  GT  ! OBJ 

PRI>HEAD  PRI!  TEEN 

0024 

0030' 

0026 

2F32 

LD 

OR 3,  R2  ! PUT  AT 

FRONT 

0028 

734e 

LD 

R4 ( R2  )  ,  R8 

e02A 

02eo 

002C 

5S08 

ELSE  !  INSERT  IN  BODY  OF  LIST  ! 

9  r  V.  ^  ' 


*  "  't  +tm **- 3»»* 
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IMPLEMENTATION  OF  PROCESS  MANAGEMENT  FOR  A  SECURE  ARCHIVAL  STOP— ETC(U) 
MAR  81  A  R  STRICKLER 


8! 


00  2E  00 5A 


SEARCH  LIST: 
D0“ 


0030 

0308 

CP 

R8 ,  #NIL 

0032 

FFFF 

0034 

5E0E 

IF  EC 

! END  OF  LIST!  THEN 

0036 

003C  ' 

0038 

5E08 

EXIT 

FROM  SEARCH_LIST 

e<?3A 

0052' 

FI 

003C 

715B 

LD 

Rll ,  R5(R8)  ! GET 

NEXT  FRI 

003E 

0e00 

0040 

8BBA 

CP 

R10,  Rll 

0042 

5E02 

IF  GT 

!  CURRENT  PRI'*  NEXT  PR I ! 

TEEN 

0044 

004A  ' 

0046 

5E08 

EXIT 

FROM  SEARCH_LIST 

0048 

0052' 

FI 

!  GET 

NEXT  OBJ  ! 

004 A 

A189 

LD 

R9  •  R8 

004C 

7148 

LD 

R8 ,  R4(R9) 

004E 

0900 

0030 

E8EF 

OD  ! 

END  SEASCH_LIST  ! 

!  INSERT  IN  LIST  ! 

0052 

7348 

LD 

R4(R2),  Rfc 

0054 

0200 

0056 

7342 

LD 

R4(R9),  R2 

0058 

0900 

FI 

FI 

!  SET  OBJECT'S  STATE  ! 

005A 

7367 

LD 

R6 ( R2  )  ,  R7 

005C 

02e0 

005E 

9E08 

RET 

0060 

END  LIST 

INSERT 

192 


0060 


CPEATE_STACK  PROCSDUPE 

J  vWVVVVVVVVVVVVVWVVVifVVVVVWVWV 

*  INITIALIZES  KERNEL  STACK  * 

*  SEGMENT  FOP.  PROCESSES  * 

mw  www  mvw  wwmw 

*  REGISTER  USE:  * 

*  PARAMETERS:  * 

*  R0 :  ARGUMENT  POINTER  * 

*  ( INCLUDES :FCW, IC.NSP ,  AND  * 

*  RETURN  POINT.  SEE  LOCAL  * 

*  VARIABLES  BELOW.)  9 

9  Rl:  TOP  OF  STACK  * 

*  R2-P14:  INITIAL  REGISTER  * 

*  STATES.  (NOTE:  IN  DEMO,  NO* 

*  SPECIFIC  INITIAL  REGISTER  * 

*  VALUES  ARE  SET,  EXCEPT  R13* 

*  (USER  ID)  FOR  USER  PRO-  * 

*  CESSES.)  * 

*  LOCAL  VARIABLES  * 

*  (FROM  ARGUMENTS  STORED  ON  * 

*  STACK.)  * 

*  R3 :  FC'W  * 

*  R4 :  PROCESS  ENTRY  POINT  (IO* 

*  RS:  NS?  * 

*  R6:  PREEMPT  RETURN  POINT  * 


ENTRT 

0060 

93F0 

PUSH 

9315,  R0  JSAVE  ARGUMENT  PTP ! 

0062 

ADF0 

EX 

R0.  R15  !  S  AVE  SP ! 

0064 

341F 

LDA 

R15,  Rl(#INTERRUPT_REG) 

0066 

00CA 

0069 

1CF9 

LDM 

0315,  Rl,  *16  !  INITIAL  REG.  VAil’ 

006A 

010F 

!  NOTE: 

ONLT  REGISTERS  R2-R14  MAT  CONTAIN 

INITIALIZATION  VALUES  ! 

006C 

A10F 

ID 

R15,  R0  'RESTORE  SP! 

006E 

97F0 

POP 

30,  UR15  ! RESTORE  ARGUMENT  PTP.! 

0070 

A1FE 

LD 

R14,  R15  !SAV£  CALLER  RETURN  POIN 

0072 

A10F 

LD 

Rl5,  R0  !GET  ARGUMENT  PTP! 

0074 

1CF1 

LDM 

33,  0R15,  *4  SLOAD  ARGUMENTS! 

0076 

0303 

0078 

341F 

LDA 

Rib,  R1(#INTERRUPT_FRAME) 

007A 

00EC 

007C 

1CF9 

LDM 

ORlb ,  33,  #2  UNIT  IPST  FRAME! 

007E 

0301 

oeee 

341F 

LDA 

P.15 ,  R1(#N_S_P) 

0082 

00ce 

0084 

2FF5 

ID 

PR15,  R5  ! SET  NSP! 

0086 

030F 

SUB 

R15,  *2 
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ID 

IDA 


1 


0088  0002 
008 A  2FF6 
008C  3418 
008E  00F0 

0080  2100 
0082  5000 
0094  ice9 
0096  0F01 
0098  AlEF 
009 A  9E08 
009C 

END 


G»R15,  R6  'PREEMPT  RET  POINT 
R8,  Rl(#STACK_BASE) 


j 


!  INITIALIZE  STATUS  REGISTER  BLOCK  ! 


ID 

R0  ,  #K£RNEL_FC  '# 

I  DM 

0H6,  R15, 

#2  'SAVE  SP  A 

FC'1'! 

LD 

R15,  R14 

! RESTORE  RETURN 

POINT! 

RET 

END  CREATE  STACK 
LIBRARY  FUNCTION 


APPENDIX  G  -  INNER  TRAFFIC  CONTOIIER  LISTINGS 


ZfcCfcfcJASM  2.H2 

LOC  OBJ  CODE  STMT  SOURCE  STATEMENT 

INNER_TRAFFIC_CONTROJL  MODULE 
$LISTON  $TTY 
!^1.  GETVORK: 

A.  NORMAL  ENTRY  DOES  NOT  SAVE  REGISTERS. 

(  THIS  IS  A  FUNCTION  OF  THa  GATEKEEPER  ). 

B.  R14  IS  AN  INPUT  PARAMETER  TO  GETWOP.K  THAT 
SIMULATES  INFO  THAT  WILL  EVENTUALLY  BE  ON 
THE  MMU  HARDWARE.  THIS  REGISTER  MUST  EE 
ESTABLISHED  AS  A  DBR  EY  ANY  PROCEDURE 
INVOKING  GETWCRK . 

C.  THE  PREEMPT  INTERRUPT  ENTRY  HANDIER  DOES 
NOT  USE  THE  GATEKEEPER  AND  MUST  PERFORM 
FUNCTIONS  NORMALLY  ACCOMPLISHED  BY  IT 
PRIOR  TO  NORMAL  ENTRY  AND  EXIT. 

(  SAVE/RESTORE:  REGS,  NSPJ  UNLOCK  VPT,  TEST  I  NT ) 

2.  GENERAL: 

A.  ALL  VIOLATIONS  OF  VIRTUAL  MACHINE  INSTRUCTIONS 
APS  CONSIDERED  ERROR  CONDITIONS  AND  WILL  RETURN 
SYSTEM  TO  THE  MONITOR  WITH  AN  ERROR  CODE  IN  R? 
AND  THE  PC  VALUE  IN  R1 . 

B.  ITC  PROCEDURES  CALLING  GETWORK  PASS  DPR 
(REGISTER  R14 )  AND  LOGICAL  CPU  NUMBER 
(REGISTER  R13 )  AS  INPUT  PARAMETERS. 

(INCLUDES:  SIGNAL,  WAIT,  SWAP  VD£P, 

PHYS_PREEMPT_HANDLER ,  AND  IDLE  ^ .  ! 

CONSTANT 

i  ERROR  CODES  wwvwwm  ; 


U  L 

= 

e 

!  UNAUTHORIZED  LOCK  ! 

M  L  EM 

1 

!  MESSAGE  LIST  EMFTY  ! 

M  L“ER 

= 

2 

!  MESSAGE  LIST  ERRC^  ! 

p.“l"e 

s 

3 

!  READY  LIST  EMPTY  ! 

m  L  0 

= 

4 

!  MESSAGE  LIST  OVERFLOW 

SNA 

= 

5 

!  SWAP  NOT  ALLOWED  ! 

V  I_E 

s 

6 

!  VP  INDEX  ERROR  ! 

M  U 

s 

7 

!  MMU  UNAVAILABLE  ! 

NR  SDR 
NR"CPU 

NR"  VP 

SYSTEM  PARAMETERS  ********  f 
:*  64  l LONG  WORDS! 

:  =  2 

:*  NR  CFU*4 

NP_AVAIL. 

.VP 

: =  NR_CPU*2 

MAX  DBP  NR  :=  1 0  !PER  CPU! 

STACK.  SEG  :  »  1 

PRDS  SEG  :=  0 

STACl_SEG_SIZE  :=  $100 

!  *****  OFFSETS  IN  STACK  SEG  *****  ! 

STACK  BASE  :=  STACK  SEG  SIZE-*10 

STATUS  REG  BLOCK:*  STACK'S  EG  SIZi-*10 
INTERRUPT  FRAME  :=  STACK”BASE-4 
INTERRUPT"REG  :»  INTERRUPT  FRAME-34 
N_S  P  “  :  =  lNTERRUPT'REG-2 

F_C”w  :*  STACK_SSG~SIZE-*E 

ON  :=  *FFFF 

OFF  :=  0 
RUNNING  :=  e 
READI  :=  1 
WAITING  :=  2 
NIL  :=  *FFFF 
INVALID  :=  %EEEE 

MONITOR  :=  *A900  !  H3UG  ENTRY  ! 

KERNEL  FCW  :=  *5000 
AVAILABLE  :=  0 
ALLOCATED  :  =  *FF 

TYPE 

MESSAGE  ARRAY  116  BYTE] 

ADDRESS  WORD 

VP  INDEX  INTEGER 

MSG__INDEX  INTEGER 

SEG  DESC  REG  RECORD 

l 

BASE  ADDRESS 

ATTRIBUTES  BYTE 

LIMITS  BYTE 

J 

MMU  ARRAY fNR_SDR  SEG_DESC_REGJ 

MSG  TABLE  RECORD 
[  MSG  MESSAGE 

SENDER  VP  INDEX 

NEXT  MSG  MSG  INDEX 

FILLER  ARRAY  [6,  rfORDJ 

J 
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0000 


0210 


0000 


0A00 

0A0A 


VP  TABLE  RECORD 
"  [  DER  ADDRESS 

PR  I  WORD 

STATE  WORD 

IDL£_FLAG  WORD 

PREEMPT  WORD 

PHIS  PROCESSOR  WORD 

NEXT~R EADY  VP  VP  INDEX 

MSG  LIST  MSG  INDEX 

EXT  ID  WORE 

FILLER  1  ARRAY  l?,  WOREJ 


EXTERNAL 
LIST  INSERT 


PROCEDURE 


GLOBAL 

BOOTS TRAP_EN TRY  LABEL 

$SECTION  1TC_DATA 

VPT  RECORD 

[  LOCK  WORD 

RUNNING  LIST  ARRAY  [  NR_CP(J  WORD] 

READY  LIST  ARRAY  [NR-CPU  WORD] 

FREE  IlST  MSG  INDEX 
VIRT  INT  VEC  ARRAY  [  1 ,  ADrRESSJ 

FILLER  2  WORD 

VP  "  ARRAY  INR  VP,  VP  TABLSJ 
MSG  0  ARRAY  INR  VP,~MSG  TABLEJ 

J 

EXT_VP  LIST  ARRAY L NR  AVAIL  VP  WORDJ 


SSECTION  MMU  DATA 


MMU  IMAGE  RECORD 

"[ 

MMU  STRUCTURE  ARRAY  [MAX  DBR  NR  MMUJ 

J 

NEXT  AVAIL  MMU  ARRAY fMAX  DBR  NR  BYTEJ 
?RDS~  RECORD 

IPHYS  CPU  ID  WORD 
LOG  CPU  ID  INTEGER 
VP  NR  WORD 

IDLE  VP  VP  INDEXJ 
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^SECTION  ITC_INT_PfiOC 
INTERNAL 

0000  GETWORK  PROCEDURE 

**  SWAPS  VIRTUAL  PROCESSORS  * 

*  ON  PHYSICAL  PROCESSOR.  * 

?¥W¥¥W*f¥?¥¥W¥WW¥¥M|l|¥*¥*¥ 

*  PARAMETERS:  * 

*  R13:  LOGICAL  CPU  #  * 

*  REGISTER  USE:  * 

*  STATUS  REGISTERS  * 

*  R14:  DBR  (SIMULATION)  * 

*  R1&:  STACK  POINTER  * 

*  LOCAL  VARIABLES:  * 

*  Rl:  READI  VP  (NEW)  * 

*  R2 :  CURRENT  VP  (OLD)  * 

*  P.3:  FLAG  CONTROL  WORD  * 

^  R4 :  STACK  SEG  EASE  ADDR  * 

*  R 5:  STATUS  REG  BLOCK  ADDR  * 

*  R6:  NORMAL'S? ACX  POINTER  * 

WWW*  J 

ENTRI 


!  GET  STACK  BASE  ! 


0000 

31E4 

LD 

R4, 

R14(#STACK_SEG*4) 

0002 

0004 

0004 

3445 

LDA 

R5, 

R4(#STATTJSJiEG_fiLOCK  ) 

0006  00F0 

!  *  *  SAVE  SP  *  *  ! 

0008  2F5F  LD  PR5,  R15 

!  *  *  SAVE  FCW  *  *  ! 

000A  7D32  LDCTL  R3,  FCW 

000C  3343  LD  R4(#F  C  W),  R3 

000S  00F2 

BOOTSTRAP  ENTP t :  ?  G I ORAL  LABEL  ! 

!  GET"READT_VP  LIST  ! 

0010  61D1  LD  Rl,  VFT.READT_LIST(Rl3) 

0012  0006' 

SSL  EC  T  V  P ; 

DO  ! “UNTIL  SLGIELE  READY  VP  FOUND  ! 

0014  4D11  CP  VPT . VP .IDLE  FLAG( FI )  ,~*ON 
0016  0016' 

0018  FFFF 

001A  5E0E  IF  EC  !  VP  IS  IDLE  !  THEN 
001C  0030' 

001S  4D11  C?  VPT. VP. PREEMPT ( Rl ) ,  »CN 

0020  0018' 

0022  FFFF 

0024  5E0E  IF  EO  !  PREEMPT  INTERRUPT  IS  ON  !  THEN 
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002b 

002C  ' 

0028 

SE08 

EXIT  FROM  S ELECT_VP 

002A 

003C  ' 

FI 

B02C 

5E08 

ELSE  !  VP  NOT  IDLE  I 

002E 

0034' 

0030 

5E08 

EXIT  FROM  SELECTOR 

0032 

003C ' 

FI 

!  GET  NEXT  READY  VP  ! 

0034 

6113 

LD  R3,  VPT.VP.NEXT_READI 

0036 

001C  ' 

0036 

A131 

LD  Ri,  R3 

003A 

E8EC 

CD 

!  NOTE:  THE  READY  LIST  WILL  NEVER  BE  EMPTY  SINCE 
THE  IDLE  VP,  WHICH  IS  THE  LOWEST  PHI  VP, 

WILL  NEVER  BE  REMOVED  PRO?*  THE  LIST. 

IT  WILL  RUN  ONLY  IF  ALL  OTHER  READY  VP'S  ARE 
IDLING  OR  IF  THERE  ARE  NO  OTHEP  VP'S  ON 
THE  READY  LIST.  ONCE  SCHEDULED,  IT 

will  run  Until  receiving  a  hbwe  interrupt.  ’• 


!  NOTE:  R14  IS  USED  AS  DPR  HERE.  WHEN  MMU 

IS  available  this  series  op  save  and  load 

INSTRUCTIONS  WILL  BE  REPLACED  £1  SPECIAL  I/C 
INSTRUCTIONS  TO  THE  MtfU.  ! 


003C 

4ri5 

LD 

VPT. VP.STATE(Rl) ,  ^RUNNING 

003E 

0014' 

0040 

0000 

0042 

6FD1 

LD 

VPT.?UNNING_LIST(R13) ,  Rl 

0044 

0002' 

!  v 

*  SWAP  DBF  *  *  ! 

0046 

6  HE 

LD 

R14 •  VPT.VP.DBR(Rl) 

0048 

0010 ' 

I  LOAD  NEW  VP  SP  !  j 

004A 

31E4 

LD 

R4,  R14(#STACK_SEG*4  ) 

004C 

0004 

004E 

3445 

LDA 

P5 ,  P.4 (# STATUS _REG_ BLOCK  ) 

00b0 

00F0 

0052 

215F 

LD 

Rl5,  OR5 

!  * 

*  LOAD  NSW  FCW  *  *  ! 

00b  4 

3143 

LD 

R3.  R4( #F_C_W ) 

0056 

00F2 

0058 

7D3A 

LDCTL  FCW,  S3 

005A 

9EZ8 

RET 

005C 

END  GET WORK 

igy 


J 


r  *>■ 


ee5C  SNTBR_>MSG_LIST  PROCEDURE 

*  INSERTS  POINTER  TO  MESSAGE  * 

*  FROM  CURRENT  VP  TO  SIGNALED  VP* 

*  IN  FIFO  MSG_LIST  '  * 

WVVWWWWM  WVJpaitV  WV  WV  w  w 

*  REGISTER  USE:  * 

*  PAPAMETERS:  * 

*  H8(H9):MSG  (INPUT)  * 

*  Rl:  SIGNALED  VP  (INPUTS  * 

*  PI 3:  LOGIC AL~CPrJ  NUMBER.  * 

*  LOCAL  VARIABLES:  * 

*  R2 :  CURRENT  VP  * 

*  R3 :  FIRST  FREE  MSG  * 

*  R4 :  NEXT  FREE  MSG  * 

*  R5 :  NEXT“0  MSG  * 

*  R6 :  PRESENT__0_MSG  * 

ENTRf 

00 5C  61D2  ID  R2,  VPT. RUNNING^! IS T(R13  ) 
005E  0002 ' 


!  GET  FIRST  MSG  FROM  FREE  LIST  ! 
0060  6103  LD  R3,  VPT. FREE  LIST 
0062  000A ' 


0064  0B03 
0066  FFFF 
0068  5E0E 
006A  0079' 
006C  7601 
006E  006C  ' 
0070  2100 
0072  0004 
0074  5F00 
0076  A900 


!  *  *  *  *  DEBUG  *  *  *  *  ! 

CP  R3 «  #NIL 

IF  EC  THEN 

IDA  PI,  S 

LD  R0 ,  #M_L_0!  MESSAGE  LIST  OVERFLOW  ! 
CALL  MONITOR 
FI 

!  *  *  *  END  DEBUG  *  *  *  ! 


0078 

6134 

LD 

R4, 

VPT. MSG_0. NEXT 

_MSG(R3^ 

007A 

0122' 

007C 

6F04 

ID 

VPT . 

FBEE_LI ST ,  R4 

007E 

000A ' 

f  INSERT 

MESSAGE  LIST 

INFORMATION 

0080 

763A 

LDA 

R10  ,VPT.MSG_ 

0 .MSG (R3 ) 

0082 

0110' 

0084 

2107 

LD 

R7,#S IZEOF  MESSAGE 

00ee 

0010 

0088 

BA81 

LDIRB 

C*R10 ,9R8  ,R7 

008A 

07A0 

200 


008C  6F32  LD  VPT.MSG  0 . SENDER ( R3  )  ,  R2 
008E  0120' 

!  INSERT  MSG  IN  MSG  LIST  ! 

0090  6115  LE  R5,  V?T.VP.MSG_LIST(R1) 

0092  0015' 

0094  0E05  C?  R5,  #NIL 

0096  FFFF 

0098  5E0E  IF  £0  !  *SG  LIST  IS  EMPTY  !  THEN 

009A  eeA4' 

!  INSERT  MSG  AT  TOP  OF  LIST  ! 

009C  6F13  ID  V??. VP. MSG  LlST(Pl).  R3 
009E  001S' 

00A0  5E08  ELSE  !  INSERT  MSG  IN  LIST  ! 

00A2  00BC ' 

MSG_0  SEARCH: 

DO  ! “WHILE  NOT  END  OF  LIST  ! 

00A4  0B05  CP  R5,  #NIL 

00A6  FFFF 

00A8  5E0E  IF  EO  !  END  OF  LIST  !  THEN 

00AA  00B0 ' 

00AC  5E08  EXIT  FROM  MSG  C  SEARCH 

00AE  0038' 

FI 


!  GET  NEXT  LINK.  ! 


00B0 

A156 

LD 

R6,  R5 

00B2 

6165 

LD 

R5,  VPT . MS  G_0 . NE XT_MS G ( R6 ) 

0034 

ei22' 

0036 

SeF6 

OD 

!  INSERT 

MSG  IN  LIST  ! 

00B8 

6F63 

ID 

VPT.MSG_0. NEXT_MSG( 36) ,  R3 

003  A 

0122' 

FI 

00BC 

6F35 

LD 

VPT.MSG_0.NEXT_MSG(R3U  Pft 

00BE 

0122' 

00C0 

9E0e 

RET 

00C2 

END  ENTER  MSG  LIST 
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eeC2 


00C2  6iD2 

00C4  0002' 


GET_FIRST_MSG  PROCEDURE 

I  >*wwww  wwwwwwww  ww  ww  ww  ww  wwwww  www  wwwwww 

REMOVES  MSG  FROM  MSG  LIST  * 

*  AND  PLACES  ON  FREE  LIST.  * 

*  RETURNS  SENDER'S  MSG  AND  * 

w  vp  id  * 

vw WWWWWWWWWWWWWWWWWWWWWWW w WWW WWW WWW 

’REGISTER  USE:  ’ 

’  PARAMETERS :  v 

*  Re(R9):  MSG  POINTER  (INPUTS  ’ 

’  R13:  LOGICAL  CPU  NUMBER  (  INPUT)’ 


* 

Rl: 

SENDER  VP  (RETURNED) 

* 

* 

LOCAL 

,  VARIABLES 

V 

R2 : 

CURRENT  VP 

V 

* 

R3 : 

FIRST  MSG 

* 

* 

R4 : 

NEXT  MSG 

* 

R5 : 

NEXT  FREE  MSG 

* 

R6 : 

PRESENT  FREE  MSG 

* 

WW WWWWWWWMWWWW WW WWWWWW WWW WWW w WWW WWW ; 

ENTRr 

LD  R2,  VPT.RUNNING_LIST(R13) 


!  REMOVE  FIRST  MSG  FROM  MSG_LIST  ! 
00C6  6123  ID  R3 ,  VPT.VP.MSG  IIST(R2) 

00C8  00115' 


0-0 C A  0B03 
00CC  FFFF 
00CE  5E0E 
00D0  eeDE' 
00D2  2100 
00D4  0001 
00D6  7601 
00D9  00D6  ' 
00DA  5F00 
00DC  A900 


00DE  6134 
00E0  0122' 
00E2  6F24 
00E4  001E ' 

Z0E6  6105 
00E8  000A ' 
00EA  ZB05 
00EC  FFFF 
00EE  5E0E 
00F0  0100' 


;  w  «  w  w  OEEUG  ’  ’  ’  ’  ! 

CP  R3,  *NIL 

IF  EQ  THEN 

LD  R0,  #M_L_EM  !  MSG  LIST  FMFT 
LDA  Rl,  $ 

CALL  MONITOR 
FI 

j  w  »  w  iND  DEBUG  ’  ’  ’  ! 


LD 

R4,  VPT.MSG_C.NEXT_MSG(R3) 

LD 

VPT.VP.MSG_LIST^R2) ,  R4 

!  INSERT  MESSAGE  IN  FREE  LIST 

LD 

R5,  VPT.FP.EE_LIST 

CP 

R5,  #NIL 

IF  SO 

!  FREE_LIST  IS  EMPTY  !  THEN 
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00F2  6f  03 
00F4  000A' 
0ZF6  4D35 
00F8  0122' 
00FA  FFFF 
00FC  5E08 
00FE  011C' 


!  INSERT  AT  TOP  OF  LIST  ! 

LD  VPT . FR£E_LIST ,  S3 

ID  V?T.MSG_C.NEXT_MSG(R3) ,  *NIL 

ELSE  !  INSERT  IN  LIST  ! 

FREE  C  SEARCH: 

BO 

CP  R5 ,  #NIL 

IF  EO  !  END  OF  LIST  !  THEN 
EXIT  FROM  FRSE_(,'JJ£AHCH 


R6,  Rb 

R5 ,  VPT.MSG_C.NEXT_MSG(R6) 


0100 

0B05 

CP 

0102 

FFFF 

0104 

5E0E 

IF  EO 

0106 

010C' 

0108 

5E08 

EXIT 

010  A 

0114' 

FI 

!  GET 

010C 

A156 

LD 

010E 

6165 

LD 

0110 

0122' 

0112 

E8F6 

OD 

!  INSERT 

0114 

6F63 

LD 

0116 

0122' 

0118 

6F35 

LD 

011A 

0122' 

VPT.MSG_Q.NEXT_MSG(R6) ,  R3 
VPT . MSG_Q . NeXT_MSG(R3 )  ,  Rb 


!  GET  MESSAGE  INFORMATION: 
(RETURNS  Rl:  SENDING  VP)  ! 


011C 

6131 

LD 

Rl,  VPT. MSG 

_0 .S  ENDER ( 

011E 

0120' 

0120 

763A 

LDA 

R10  , VP?.MSG 

_0.MSG(R3) 

0122 

0110' 

0124 

2107 

LD 

B7,#S1ZE0F 

MESSAGE 

0126 

0010 

0128 

BAA1 

LDIRB 

yRe,(_4Ri0.R7 

012A 

0780 

012C 

9E08 

RET 

012E 

END  GET 

FIRST  MSG 

!  *  *  INNER  TRAFFIC  CONTROL  ENTRY  FOINTS  *  *  ! 


0000 


0000 

0002 


0004 

000(3 

0000 

000A 


!  NOTE:  ALL  INTERRUPTS  MUST  BE  MASK  EC  WHENEVER 
THE  VPT  IS  LOCKED.  THIS  IS  TO  PREVENT  AN 
EMBRACE  FROM  OCCURRING  SHOULD  AN  INTERRUPT 
OCCUR  WHILE  THE  VPT  IS  LOCKED.  ! 

GLOBAL 

SSECTION  ITC_GLB_PROC 

PREEMPT  RET  LABEL 
KERNEL  EXIT  LABEL 
CREATE2INT_VEC  PROCEDURE 

*  CREATES  ENTRY  IN  VIRTUAL  I  NT-* 

^  ERRUPT  VECTOR  WITH  ADDRESS  * 

*  OF  THE  VIRTUAL  INTERRUPT  FAN-* 

*  DLER .  * 

Xfi& WJ*  vvvvvvv  WJP  WWW  WM  VW  WM 

*  PARAMETERS:  * 

*  El:  VIRTUAL  INTERRUPT  #  * 

*  R2:  INTERRUPT  HANDLER  ADDR  v 

ENTRT 

!  COMPUTE  OFFSET  IN  VIRTUAL 
INTERRUPT  VECTOR  ! 

1900  MULT  RR0 ,  #SIZE0F  ADDRESS 

0002 

!  SAVE  ADDRESS  OF  VIRTUAL  INTERRUPT 
HANDLER  IN  INTERRUPT  VECTOR  ! 

6F12  LD  VPT.VIRT  INT  VEC(Rl),  R2 

000C' 

9E0S  RET 

END  CREATE  INT_VEC 


000 A  GET  DBR  AEDR  PROCEDURE 

*  CALCULATES  DER  ADDRESS  FROM  * 

*  DBR  NUMBER  * 

m«**vm>r*«*****vvv««m****y* 


*  REGISTER  USE:  * 

*  PARAMETERS :  * 

*  ?0:  DBF.  *  * 

*  RETURNS:  * 

*  Rl:  DBR  ADDRESS  » 


ENTR* 

!  GET  BASE  ADDRESS  OF  MMU  IMAGE  * 

000A  7601  IDA  Rl,  MMU  IMAGE 

000C  0000' 

!  ADD  DBR  HANDLE  ( OFFSET >  TO  MMU  BASE 
ADDRESS  TO  OBTAIN  DBR  ATDRESS  ! 

000E  8101  ADD  Rl,  R0 

0010  9E08  RET 

0012  END  GET  DBR  ADDR 


0012  ALLOCATE  MMU  PROCEDURE 

**  ALLOCATES  NEXT  AVAILABLE  MMU  * 
»  IMAGE  ANI  CREATES  PRES  ENTRY  * 

v**  mmv  w  vw  wv  v#  **  vwwvv 


¥ 

REGISTER  USE: 

¥ 

¥ 

RETURNS : 

¥ 

¥ 

R0 :  DBR  # 

¥ 

¥ 

LOCAL  VARIABLES: 

¥ 

¥ 

81:  SEGMENT  # 

¥ 

¥ 

R2 :  PRDS  ADDRESS 

¥ 

¥ 

R3 :  PP.DS  ATTRIBUTES 

¥ 

¥ 

R4 :  PRDS  LIMITS 

¥ 

v«*wii**«****«*m**v**)ii*iiivv*v*v*  i 


ENTRT 

!  GET  NEXT  AVAILABLE  DBR  ft  ! 


0012 

9D08 

CLR 

R0 

0014 

8D18 

CLR 

Rl 

!  NOTE:  THE  FOLLOWING  IS  A  SAFE  SEQUENCE 

AS 

NEXT 

_AVAIL_MMU  AND  MMU  ARE  CPU  LOCAL! 

GST 

DBR: 

'DO 

0016 

4C11 

CPB 

NEXT_AVAIL_MMU(Rl) ,  #AVAILA3LE 

0018 

0A00' 

eeiA 

0000 

IF 

EO 

!  MMU  ENTRY  IS  AVAILABLE! 

001C 

5E0E 

THEN 

001E 

002E  ' 

0020 

4C15 

LDB 

N£XT_AVAIL_MMU(R1)  ,  ft  ALLOCATED 

0022 

0A00  ' 

0024 

FFFF 

0026 

5E08 

EXIT 

FROM  GET_D£F 

0028 

004A' 

002A 

5E09 

ELSE 

! CURRENT  ENTRY  IS  ALLOCATED! 

002C 

0048' 

002E 

A910 

INC 

Rl,  *1 

0030 

0100 

ADD 

Re,  #S IZEOF  MMU 

0032 

0100 

I  w 

*  v  v  DEBUG  *  *  *  *  ! 

0034 

0E01 

CP 

HI,  #MAX_D£R_NR 

0036 

000A 

0038 

5E0E 

IF 

EO  THEN 

003A 

0048' 

003C 

2100 

LD  R0,  #M_U  ! MMU  UNAVAILABLE 

003E 

0007 

0040 

7601 

LDA  Rl,  S 

0042 

0040' 

0044 

5F00 

CALL  MONITOR 

0046 

A900 

FI 

!  *  *  *  END  DEBUG  *  *  *  ! 
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FI 

0048  E6E6  OD 


004A 

2101 

LE 

P-l, 

#PRES_SEG 

!  SEGMENT  NO 

0e4C 

0000 

004E 

7602 

irA 

R2, 

PRDS 

!  PRDS  ADDR 

0050 

0A0A  ' 

0052 

2103 

ID 

R3 , 

»1  !  READ 

ATTR  ! 

0054 

0001 

PRDS )-l)/256 

0056 

2104 

ID 

R4 , 

#(  (SIZEOF 

0058 

0000 

!  PRDS 

LIMITS 

* 

!  CREATE  PRDS  ENTRY  IN  MMU  IMAGE  ! 

005A  5F00  CALI  OPDATE_MMO_ IMAGE  !(R1:  SEGMENT  * 

005C  0060' 

R2:  SEG  ADDRESS 
R3 :  ATTRIBUTES 
R4  :  SEG  LIMITS ) ! 

005E  9E08  RET 

0060  END  ALLOCATE  MMU 


r 


0060  UPDATE_MMU_ IMAGE  PROCEDURE 

»  WMWW VWV V ****** 

*  CREATES  SEGMENT  DESCRIPTOR  * 

*  ENTRY  IN  MMU  IMAGE  * 

tlWVWiVVVVWVVVVVVVWVVVVVIKMVVVWV 


at* 

REGISTER  USE: 

m 

at* 

PARAMETERS: 

V 

as* 

R0 :  DBR  # 

as* 

a«* 

Rl:  SEGMENT  # 

at* 

as* 

R2:  SEGMENT  ADDRESS 

at* 

at* 

R3 :  SEGMENT  ATTRIBUTES 

V 

>9* 

R4 :  SEGMENT  LIMITS 

at* 

at* 

LOCAL  VARIABLES: 

at* 

V 

R10 :  MMU  EASE  ADDRESS 

as* 

* 

R13:  OFFSET  VARIABLE 

as* 

W9VW  WM*  WWW  WWW  WWW*  **>*  I 


ENTP.V 


0060 

210A 

LD 

R10 ,  #MMU_IMAGE  f  MMU  BASE  AEDRESS  ! 

0062 

0000' 

0064 

810A 

ADD 

R10 ,  R0 

0066 

210D 

LD 

R13*  #S IZ20F  SEG_DESC_REG 

006B 

0004 

006A 

991C 

MULT 

RR12,  Rl  !  COMPUTE  SEG  DES.C  OFFSET 

eeec 

81DA 

ADD 

R10 ,  R13  ! ADD  OFFSET  TO  BASE  ADDRESS 

!  INSERT  DESCRIPTOR  DATA  ! 

006E 

2FA2 

LD 

8R10,  R2 

0070 

A9A1 

INC 

R10,  #2 

0072 

0DA8 

CLR 

<?R10 

0074 

2EAC 

LDB 

0R10,  RL4 

0076 

A9A0 

INC 

R10.  #1 

0078 

20AC 

LDB 

RL4,  PR10 

007  A 

0A0B 

CPB 

RL3,  #£(2)00001000  !  EXECUTE  ! 

007C 

0808 

007E 

5E0S 

IF 

EO  TEEN 

0080 

008A  ' 

0032 

06  0C 

ANDB  RL4 ,  #£(2)11110111  !  EXECUTE  * 

0084 

F7F7 

0086 

5E08 

ELSE 

0088 

008E  ' 

008A 

060C 

ANDB  RL4 ,  #£(2)11111110  !  READ  m^SK 

008C 

FEFE 

FI 

008E 

84BC 

ORB 

RL4,  RL3 

0090 

2EAC 

LDB 

OR10,  RL4 

0092 

9E08 

RET 

0094  END  UPDATE_MMU_IMAGE 


ee94 


WAIT  PROCEDURE 

*  INT*A_KERNEL  STNC/COM  PR  IMATIVE  * 


*  INVOKID  BY  KERNEL  PROCESSES  * 

*  PARAMETERS  * 

*  R8(R9):  MSG  POINTER  (INPUT)  * 

*  Rl s  SENDING  VP  (RETURN)  » 

*  GLOBAL  VARIABLES  * 

*  R14 :  LER  (PARAM  TO  GETWORK )  * 

*  LOCAI  VARIABLES  * 

*  R2 :  CURRENT  VP  (RUNNING;  * 

*  R3 :  NEXT  READY  VP  * 

*  R4 :  LOCK-ADDRESS  * 

*  R13 :  LOGICAL  CPU  NUMBER  * 


***************** «*«?***««*«*****>!>*  t 

ENTRY 

!  MASK  INTERRUPTS  I 
ce94  7C01  DI  VI 

j  LOCK  VPT  ! 

0096  7604  LDA  R4 ,  VPT. LOCK 

0098  00 00 ' 

009 A  5F00  CALL  SPIN  LOCK  !  (R4 :~VPT  .LOCK)  ! 

009C  0282  * 

\  NOTE:  RETURNS  WHEN  VPT  IS  LOCKED  BY  THIS  VF  ' 

!  GET  CPU  NUMBER  ! 

009 E  5F00  CALL  GET  CPU  NO  ! RETURNS : 

00A0  02C6  ' 

Pi : CPU  9 
R2 :#  VP'S! 

00A2  A11D  LD  R13 ,  Rl 

00A4  61D2  LD  R2f  VPT  .RUNNING  LIST(R13) 

00A6  0002' 

00Ae  6123  Lr  53,  VPT. VP. NEXT  READY  V?(R2' 

00AA  001C' 

00AC  4D21  CP  VPT. VP. MSG  LIST(52),  #NIL 

00A E  001E ' 

00B0  FFFF 

00B2  5E0E  IF  EC  !  CURRENT  VP'S  *SG  LIST  IS  EMPTV  !  THEN 
00B4  00EA ' 

!  REMOVE  CURRENT  VP  FROM  READY  LIST  ! 

!  »  v  v~*  DEBUG  *  v  t 

00B6  0B03  CP  53,  #NIL 

00B8  FFFF 

00BA  5E0E  IF  EO  THEN 

00BC  00CA ' 

00SE  2100  LD  R0,  #F.  L  E  !  READY  LIST  EMFTY  ! 

00C0  0003 

00C2  7601  LDA  Rl,  A 


eec4  00C2 ' 

00C6  5F00  CALL  MONITOR 

00Ce  A900 

FI 

!  m  *  *  SND  DEBUG  *  *  *  ! 

00C A  5FD3  LD  VPT  . READY  LIST(R13),  P.3 

00CC  00eb' 

00CE  4D25  LD  VPT. VP. NEXT  READY  VP(R2l,  *NIL 

00D0  001C' 

00D2  FFFF 


00D4  4D25 
00D6  0014' 
00D8  0002 

00DA  612E 
00DC  0010' 

00DE  93F8 

00E0  93FD 
00E2  5F00 
00E4  0000' 


00E6  97FD 
00E8  97F8 


00EA  5F00 
00EC  00C2 ' 


!  PUT  IT  IN  WAITING  STATE  ! 

LD  VPT. VP. STATED  32)  ,  ^WAITING 


!  SET  DER  ! 

LD  314,  VPT. VP . EBR (R2  ^ 

!  SCHEDULE  FIRST  ELGIBLa  READV  VP  ! 

PUSH  PRlb.RB 

!  SAVE  LOGICAL  CPU  #  ! 

PUSH  93 lb ,  313 

CALL  GETWOP.K  !R13:C?U  * 

R14 : DER ! 

!  RESTORE  CPU  it  ! 

POP  R13,  PP.15 

POP  R8,  PP.15 

FI 

!  GET  FIRST  MSG  ON  CURRENT  VP'S  ^SG  LIST  ! 
CALL  GET_FIRST_MSG  !  COPIES  MSG  IN  MSG  AP.RA  v 

!  R13:  LOGICAL  CPU  ft  ! 
’.RETURNS  Rl :  SEN  EER  V?  ! 


!  UNLOCK  VPT  ! 

00EE  4D08  CIR  VPT. LOCK 
00F0  0000' 

!  UNMASK  VECTORED  INTERRUPTS  ! 
00F2  7C05  El  VI 


!  RETURN:  RlrSENDER  VP  ! 
00F4  9E08  RET 
00F6  END  WAIT 


00F6  SIGNAL  PROCEDURE 

*  INTRA  KEPNEL  SYNC  /COP  PR  IMATIVE  * 
»  INVOKED  BY  KERNEL  PROCESSES  * 

V  W*  W  V  W  V  V  W  W  **  W  W  V  *«  W  *V  **  W  »* w 


V  REGISTER  USE: 

*  PARAMETERS: 

*  R e ( R9 ) :  MSG  POINTER  (INFUT) 

*  Ri:  SIGNALED  VP  ID  (INPUT) 

*  GLOBAL  VARIABLES 


«n 

* 

V 

nt 


* 

R13 : 

CPU  #  (PARAM  TO  GET WORK) 

R14 : 

DER  (PARAM  TO  GETWORK) 

V 

* 

LOCAL 

,  VARIABLES: 

V 

* 

Rl : 

signaled  vp 

s* 

R2 : 

CURRENT  VP 

V 

R4 : 

VPT.LOCK  ADDRESS 

*«*  WWigcagc  W  WM  W  age  WWW  W  t 

ENTR'V 

!  SAVE  VP  ID  ! 


00/6 

93F1 

PUSH 

PR15 ,  Rl 

!  MASK 

INTERRUPTS  ! 

00F8 

7C01 

DI 

VI 

!  LOCK 

VPT  ! 

00FA 

7604 

LDA 

R4,  VPT.LOCK 

00FC 

0000' 

00FE 

5F00 

CALL 

SPIN_LOCK  !  (R4  :~</PT .  LOCK '  ! 

0100 

0282' 

! NOTE : 

RETURNS  WHEN  VPT  IS  LOCKEr  3Y  THIS 

!  GET 

LOGICAL  CPU  #  ! 

0102 

5F00 

CALL 

GET_CPU_.no  !  RETURNS : 

0104 

02ce' 

Rl : CPU  * 

R2:«  VP'S! 

0106 

A11D 

LD 

R13 »  Rl 

*  RESTORE  VP  ID  ! 

0108 

97F1 

POP 

Rl,  tfRl5 

!  PLACE  MSG  IN  SIGNALED  V?'S  MSG  LIST  ! 

010A 

5F00 

CALL  ENTEP  MSG  LIST  !(P8:MSG  POINTER 

010C 

005C  ' 

Rl :S IGNALEC  VF 

R13 : LOGICAL- CPU 

010E 

4D11 

CP 

V?T.VP.STATE(R1  )  ,  ^WAITING 

0110 

0014' 

0112 

0002 

0114 

5E0E 

IF  SO 

!  SIGNALED_VP  IS  WAITING  !  THEN 

0116 

0148' 

t  WAKE  IT  UP  AND  "US  IT  READY  ! 

one 

A112 

LD 

R2,  Rl 

011A 

76D3 

LEA 

R3,  VPT. READ!  L1ST(R13) 

VP. 
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011C 

0006  ' 

011S 

7604 

LDA 

R4,  VPT. VP. NEXT  READ! 

0120 

001C' 

0122 

7605 

lda 

P-5,  VPT. VP.  PR I 

0124 

0012' 

0126 

7606 

LDA 

R6,  VPT. VP. STATE 

0128 

0014' 

012A 

2107 

ID 

R7,  #RSAD^ 

012C 

0fc01 

!  SAVE 

LOGICAL  CPU  #  ! 

012E 

93FD 

PUSH 

y?.l5,  R13 

0130 

5F00 

CALL 

LIST  INSERT  !R2:  OPJ 

0132 

0000* 

0134  97FD 

0136  61D2 
0138  0002' 


R3 

LIST  PTR  A DDR 

R4 

NEXT~OEJ  PTR 

R5 

PRI0RITY”?TP. 

Re 

STATE  PTR 

R7 : 

STATE'  ! 

!  RESTORE  LOGICAL  CPU  #  ! 

POP  R13 ,  GR15 

!  PUT  CURRENT  VP  IN  READ^ 

STATE  ! 

LD  R2,  VPT.RUNNING_IIST(R13X 

013A  4D25  LD 
013C  0014' 

013E  0001 


?PT. VP. STATE ( R2 }  ,  *RiADT 


!  SET  DPR  ! 

ei40  612E  ID  R.14 ,  VPT.VP.DBR(R2  > 

0142  0010' 


0144  5Fe0 
0146  0000' 


!  SCHEDULE  FIRST  ELGIBLE  REACT  ^P  ! 


CALL  GETiOP.K 

FI 


!R13  JlOGIC  AL  CPU  ft 
P14  :DBH  ! 


!  UNLOCK  VPT  ! 

0148  4D08  CLR  VPT. LOCK 
014A  0000' 

■  UNMASK  VECTORED  INTERRUPTS  ! 
014C  7C05  El  VI 


014E  9E08  RET 
01b0  END  SIGNAL 
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(£150  SET  PREEMPT  PROCEDURE 

*  SETS  PREEMPT  INTERRUPT  ON* 

*  TARGET  TP.  CALLED  BT  TC  * 

*  ADVANCE.  "  * 

*  REGISTER  USE:  * 

*  PARAMETERS:  * 

*  PI rTARGET  VP  ID  (INPUT)  * 

*  LOCAL  VARIABLES  * 

*  Rl:  VP_ INDEX  * 

jqsjjCSt  »)<>*  J?jyw  J)t  wvwwvvv  s*  vVWV  W  1 

ENT0V 

! *  NOTE:  DESIGNED  AS  SAFE  SECUENCE  SC  VFT  NEED 
NOT  BE  LOCKED.  ! 

!  CONVERT  VP  ID  TO  VP  INDEX  ! 
else  6112  LD  P.2T  EXT  VP  LIST  (Rl ' 

0152  021 0  ' 

!  TURN  ON  TGT  VP  PREEMPT  FLAG  ! 

0154  4D25  LD  VPT . VP . PREEMPT(R2 )  .  #ON 

0156  0018' 

015e  FFEF 

!  **  IF  TARGET  VP  NOT  LOCAL 

(  NOT  BOUND  TO  THIS  CPU  ) 

(IE.  IF  «CPU  SEG»CPU  IDOVFT.VP.PHYS  CPU(Rl)J 
THEN  SEND  HARDWARE  PREEMPT  INTERRUPT  TO 
VPT  .  VP .CPU (Rl )  .  **  ! 

015A  9E08  RET 

015C  ENr  SET  PREEMPT 
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015C  IDLE  PROCEDURE 

;  www  ww  w  w  w  wv  ww  w 


*  LOADS  IDLE  DBR  ON  * 

*  CURRENT  VP.  CALLED  BY  * 

v  TC_GETW0T,K .  * 

*  REGISTER  USE  * 

*  GLOBAL  variable 

*  R13:  LCG  CPU  #  * 

*  P14:  EER  v 

*  LOCAL  VARIABLES:  * 

*  P.2:  CURRENT  VP  * 

*  P3 :  TEMP  VAR  * 

*  R4 :  VPT .LOCK  ADDR  * 

*  R5:  TEMP  * 


WW  W  WWWWW  ww  W  W*  W  ! 

ENTRr 


!  GET  LOGICAL  CPU  #  ! 


015C 

5F00 

CALL 

GET_CPU_N0  !  RETURNS: 

!  LOAD 

IDLE  DBR  ON  CURRENT  VP  ! 

0174 

6103 

LD 

R3 ,  PRDS . IDLE_VP 

0176 

0A10  ' 

0179 

6135 

LD 

R5,  VPT .VP . DBR (R3 ) 

017A 

0010' 

017C 

6F25 

LD 

VPT.  VP.  DBR.  (R2),  P.5 

017E 

0010' 

!  TURN 

ON  CURRENT  VP'S  IDLE  FLAG  ! 

0180 

4D25 

LD 

VPT.Vp.IDLE_FLAG(R2)  ,  *ON 

eie2 

0015' 

0184 

FFFF 

!  SET 

VP  TO  READY  STATE  ! 

0186 

4D25 

LD 

VPT.VP.STATE(R2' ,  #READY 

0198 

0014' 

016  A 

0001 

!  SCHEDULE  FIRST  ELIGIBLE  READY  VP 

019C 

5F00 

CALL 

GETWORX  !R13: LOGICAL  CPU  # 

018E 

0000' 

R14 :DPR  ! 

!  UNLOCK  VPT  ! 

0190 

4D08 

CL R  VPT. LOCK 

0192 

0000' 

!  UNMASK  VECTORED  INTERRUPTS  ! 

0194 

7C05 

SI 

VI 

eiye  9Eee 
0199 


RET 

END  IDLE 


0198 


0198  93F1 

019A  7cei 

019C  7b04 
019E  0000' 
01A0  5F00 
01A2  0282  ' 


01A4  5F00 
0 1A6  02C8' 


0 1A8  A11D 

0 1 AA  blD2 
01  AC  0002' 

01AE  4D21 
01B0  00  IE  ' 
01B2  FFFF 
01B4  5S0b 
0 1B6  01C4 ' 
0138  2100 
MlBA  0005 
01BC  76ei 
01BE  01BC ' 
01C0  5F00 
0iC2  A9ee 


SWAP  VDER  PROCEDURE 

t  9999999999999999999999999 

*  LOADS  NFW  DiR  ON  * 

*  CURRENT  VP.  CALLED  3Y  * 

^  TC_GETWORK.  * 

9999999999999999999999999 

*  REGISTER  USE  * 

*  PARAMETERS  v 

*  Si:  NEW  DBS  (INPUTS  * 

*  GLOBAL  VARIABLES  * 

*  R13:  LOGICAL  CPU  *  * 

*  R14 :  D3R  * 

*  LOCAL  VARIABLES  * 

'*  R2 :  CURRENT  VP  * 

*  R4 :  VPT.LOCK  ADDR  * 

VV« 999 99999999999 9 99 99 9 99 ! 

ENTRir 

!  SAVE  NEW  DBS  ! 

PUSH  PP.15,  El 

!  MASK  INTERRUPTS  ! 

Cl  VI 
!  LOCK  VPT  ! 

LDA  R4 ,  VPT.LOCK 

CALL  SPI N_LOCK  !  (R4  :'*VPT  .LOCK )  ! 

!  NOTE:  RETURNS  WHEN  VPT  IS  LOCKED  BY  THIS  VP. 
!  GET  CPU  #  ! 

CALL  GET_C?U_NO  ! RETURNS: 

El:  CPU  # 

R2  :*  VP'S! 

LT  R13,  HI 

!  GST  CURRENT  VP  ! 

LD  R2 ,  VPT .RUNNI NG_LIS? ( R13  ) 

J  9  9  9  DEBUG  999? 

CP  VPT. VP. MSG  LIST ( R2 )  ,  *NIL 


IP  NE  !  MSG  WAITING  !  THEN 
LE  R0,  #S_N_A  !  SWAP  NCT  ALICWEC 
LDA  HI.  $  ! P C ! 

CALL  MONITOR 
FI 

!  *  *  END  DEBUG  *  *  ! 

!  SET  DBR  ! 
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eiC4  sire 

/ice  0/10 


LD 


?.!*-,  VPT. VP. DBF.  (32  1 


!  NESTORS  NEW  DBR  ! 


1 

e  ice 

y??/ 

POP 

R0 ,  ORlb 

1 

01CA 

5F00 

CALI 

GET_LEP_ADDR  !  fR0:  IBP. 

f 

eicc 

000  A' 

I 

RETURNS 

t 

(El s  EER 

1 

!  LOAD 

NEW  DEP  ON  CURRENT  V?  ! 

[ 

/ice 

6721 

LD 

VPT . VP . DER ( R2  ^  ,  31 

f 

01D0 

0010' 

' 

!  TURN 

OF!  IDLE  FLAG  ! 

R 

L 

eiD2 

4D2S 

IE 

VPT . VP . I DIE _ FLAG (R2 ' ,  HCFF 

5*. 

?*•• 

V51U4- 

0016' 

f; 

t 

01D6 

0000 

n 

f 

\ 

!  SET 

VP  TO  READY  STATE  ! 

\ 

i 

01E6 

4D25 

LD 

V?T.V?.STATS(R2 ) .  *REAEI 

C 

H  ID  A 

0014  ' 

£ 

01DC 

0001 

!  SCHEDULE  FIRST  ELGIEIE  READ!  VP  ! 

01DE 

bF00 

CALL 

GETWORK  ! R13 1 1 OGICAL  CPU  * 

01E0 

0000  ' 

R14 :DBR  ! 


!  UNLOCK  VPT  ! 

01E2 

4D08 

CLP  VPT. LOCK 

01E4 

0000' 

!  UNMASK  VECTORED  INTERRUPTS  ! 

01E6 

7C05 

El  VI 

01E8 

9E08 

PET 

ZlfiA 

ENE  SWAP_VDER 

5 

1? 

K 
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fc'lEA 


PHYS  PREEMPT  HANDLER  PROCEDURE 


*  hardware  preempt  interrupt 

*  handier,  also  tests  for  * 

v  17 IRTL'Al  PREEMPT  INTEP.P.UPT  * 

w  FLAG  AND  INVOKES  INTERRUPT  * 

*  HANDLER  IF  FIAG  IS  SET.  * 

*  INVOKED  npON  EVERT  EXIT  FROM  v 

v  KERNEL.  KERNEL  FCX  MASKS  * 

*  NVI  interrupts  TO  PREVENT  * 

*  SIMULTANEOUS  PREEMPT  iNTiRH.  * 

*  HANDLING.  * 

*  REGISTER  USE  * 

**  LOCAL  VARIABLES  * 

*  Rl:  FREEMPT  I  NT  FIAG  * 

*  P2 :  CUPPENT'V15  “  * 

*  GLOBAL  VARIABLES  * 

*  Rl 3 :10GI CA1  CPU  *  * 

*  R14:IiBR  * 


W  WW  W  W»?V»i*  VVV«<  V  W  W  ww  w  f 

ENTRY 

;  j?  *  pqsvvpT  HANDLEP.  *  *  ! 

!  SAVE  ALL  REGISTERS  ! 
eiEA  V53WF  SrTP  P.15,  #32 

fcflEC  0020 

mi:  1CF9  LDM  0R15 ,  SI.  #16 

01E0  651  e>F 


]  SAVE  NORMAL  STACK  PCINTER  (NS?)  ! 
01F2  7P6?  LDCTL  F6,  NSP 

01F4  93F6  PUSH  PR15,  R6 

!  GET  CPU  n  ! 

if  1F6  5F00  CALL  C-ET  CPU  NO  'RETURNS: 

all's  02C S' 

Rl:  CPU  n 
R  if:#  VP  'S  r 

01FA  A11D  LD  P13,  Rl 

!  MASK  INTERRUPTS  ! 

me  ?cei  pi  vi 

!  LOCK  VPT  ! 

01FE  ?60 4  LDA  R<t,  VPT. LOCK 

0200  0000' 

0202  5F00  CALL  SPIN  LOCK 

0204  0282' 

! RETURNS  WHEN  VPT  IS  LOCKED! 
i  SET  V£R  ! 

0206  61D2  ID  P.2,  VPT. RUNNING  LIST (R12 5 
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0208  0002' 

020A  6123  LD  R14,  VPT . VP . DER ( R2 ) 

020C  <5010 ' 

!  PUT  CURRENT  PROCESS  IN  READ!  ST!  TE  ! 

02eE  4E25  ID  V PT . VP . ST AT E ( R2 ) ,  HEAD Y 

0210  2014  / 

0212  0001 

0214  SF00  CALL  GET  <CRK  !R13:L0G  CPU  e 

0216  0000  ' 

R14  :LER  ! 

PREEMPT  RET: 

!  UNLOCK  VPT  ! 

0218  4D06  CLn  7?"'  .LOCK 
021 A  0000' 

!  UNMASK  VECTORED  INTERRUPTS  ! 

021 C  7C05  El  VI 

KERNEL  EXIT: 

i  wv  UNMASK  VIRTUAL  PREEMPTS  ***  ! 

!  **  NOTE:  SAFE  SEQUENCE  AND  DOES  NOT  REQUIRE 
VPT  TO  BE  LOCKED.  **  ! 


!  GET  CURRENT  VP  ! 


021 E 

610D 

LD 

R13 ,  PP.DS  .  IOG_CPU_  ID 

0220 

0A0C  ' 

0222 

61B2 

LD 

P.2, 

VPT.3UNNING_IIS?(B13> 

0224 

0002' 

; 

TEST 

PREEMPT  INTERRUPT  FLAG  ! 

0226 

4B21 

CP 

VPT. VP, PREEMPT (R2 ^  ,  *CN 

0228 

0018' 

022A 

FFFF 

022C 

5E0E 

IF 

SQ 

!  PREEMPT  FLAG  IS  ON  !  THEN 

022E 

0240  ' 

!  RESET  PREEMPT  FLAG  ! 

0230 

4D25 

ID 

V?T.VP.?REEMPT(H2'  ,  *OFF 

0232 

0018' 

0234 

0000 

!  SIMULATE  VIRTUAL  PREEMPT  INTERRUPT 

0236 

2101 

LD 

HI,  a  V 

0238 

0000 

R2,  VPT. VIRT_INT_VSC (81  ) 

023A 

6112 

LD 

023C 

000C  ' 

023E 

1S2S 

JP 

Caw  2 

!  NOTE:  THIS  JUMP  TO  TRAFFIC  CONTROL 
IS  USED  ONLY  IN  THE  CASE  OF  A  PREEMPT  INTERRUPT, 
AND  SIMULATES  A  HARDWARE  INTERRUPT.  ! 

!  END  VIRTUAL  PREEMPT  HANDLER  ***  ! 

FI 
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!  NOTE:  SINCE  A  HDVE  INTERRUPT  DOES  NOT  EXI 
THROUGH  THE  GATE,  THOSE  FUNCTIONS  PROVI 
3Y  A  GATE  EXIT  TO  HAN LIE  PREEMPTS  MUS 
PROVIDED  HERE  ALSO.  ! 

!  RESTORE  NS?  ! 

02 40  y^Fb  POP  Rb,  0R15 

0242  7DbF  LDCTL  NSP,  Rb 

!  D5ST0RE  ALL  REGSTERS  ! 

0244  1CF1  LDM  Rl,  (?R1S, 

024b  012F 

0248  010F  ADD  R15,  *32 

024 A  0020 

!  EXECUTE  HARDWARE  INTERRUPT  RETURN  ! 

024C  7BO0  IRET 

024E  END  PKYS  PREEMPT  HANDLER 


024E 


RUNNING  *P  PROCEDURE 

*  CALLED  BY  TRAFFIC  CONTROL.  * 

*  RETURNS  VP  ID.  RESULT  IS  VALID* 

*  ONLY  WHILE"APT  IS  LOCKED .  v 

»?*»»»  v«>K*VV*«V**9 


*  REGISTER  USE  * 

w  PARAMETERS  * 

*  Rl:  EXT  VP  IE  (RETURNED)  * 

*  R3 :  LOG'CPU  *  (RETURNED)  * 

*  LOCAL  VARIABLES  * 

*  R2:  VF  INDEX  * 


SNTP* 

!  MASK  INTERRUPTS  ! 

024E  7C01  DI  VI 

!  LOCK  VPT  ! 

025e  7604  LDA  R4.  VPT. LOCK 

0252  0000' 

0254  5F00  CALI  SPIN  LOCK  !  (R4  :"'VPT .  LOCK )  ! 

0256  0282' 

!  NOTE:  RETURNS  WHEN  VPT  IS  LOCKED  BY  THIS  VP  ! 
!  GST  LOGICAL  CPU  *  ! 

0256  5F00  CALL  GET  CPU  NO  ’RETURNS: 

025A  02CB  ' 

Rl:  CPU  * 

R2  :#  Vp'S! 

025C  A113  ID  R3 ,  Rl 

025E  6132  LD  R2,  VPT. RUNNING  LIST(R3) 

0260  0002' 

!  CONVERT  VP  INDEX  TO  V?  ID  ! 

0262  6121  ID  P.1,  VPT.VP.KXOD(R2) 

0264  0020' 

!  *  *  *  DEBUG  *  *  *  ! 

0266  0P01  CP  Rl,  4NIL 

0266  FFFF 

026 A  5E0E  IF  SQ  ’  KERNEL  PROC  !  TEEN 

026C  027A' 

026E  2100  LD  R0,  #V_I_E  !  VP  INDEX  EP.RCR  ’ 

0270  0006 

0272  7601  LDA  Rl,  $ 

0274  0272' 

0276  5F00  CALL  MONITOR 

0276  A900 

FI 

!  *  *  END  DEBUG  *  *  ! 

!  UNLOCK  VPT  ! 

027 A  4D0e  CLR  VPT. LOCK 

027C  0000' 

!  UNMASK  VECTORED  INTERRUPTS  ! 

027E  7C05  El  VI 

0260  9E0B  RET 

0262  END  RUNNING  VP 


0282 


SPIN  LOCK  PROCEDURE 

*  USES  SPIN  LUCK  MECh.  * 

*  LOCKS  UNLOCKED  DATA  * 

*  STRUCTURE  (POINTED  TC  * 

*  BY  INPUT  PARAMETER).  * 

>fW  WV  VV  tuftrww  W  V  wv  w 

'•REGISTER  USE  * 

*  parameters  * 

*  P4 :  LOCK  ADDR  (INPUT)'* 

ENTRY 

!  NOTE:  SINCE  ON  LT  ONE  PROCESSOR  CURRENTLY 
IN  S I  STEM «  LOCK  NOT  NECESSARY.  **  ! 
•  *  *  *  DEBUG  *  *  *  ! 

0282  0D41  CP  GR4 ,  *0FF 

0284  0000 

0286  5E06  IF  NE  !  NOT  UNLOCKED  !  TEEN 

0288  0296' 

028 A  2100  LD  R0,  *U  L  !  UNAUTHORIZED  LOCK  ! 

028C  0000 

026S  7601  LDA  Rl,  S 

0290  028E  ' 

0292  5F00  CALL  MONITOR 

0294  A900 

FI 

!  *  *  END  DEBUG  *  *  l 
TEST  LOCK: 

!  DO  WHILE  STRUCTURE  LOCKED  ! 

0296  0D46  TSET  0R4 

0298  E5FE  JP  vl,  TEST  LOCK 

7  v*  NQTE  SEE  PLZ/ASM  MANUAL 
FOR  RESTRICTIONS  ON 
USE  OF  TSET.  **  ! 

029 A  9S08  RET 

029C  END  SPIN  LOCK 
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029C 


ITC_S5T_SSG_PTR  PROCEDURE 

m  GETS  BASE  ADDRESS  OF  SEGMENT  v 
*  INDICATED.  * 

liivvvvvmvvmvvwvvvM^ovvvvvvv** 


V 

REGISTER  USE: 

V 

* 

R0  :SEG  BASE  ADDRESS (RET  > 

V 

* 

Rl : SEG  N®  (INPUT) 

* 

V 

R2 :RUNNING  VP  (LOCAL) 

* 

R3 : Df R  VALUE  (LOCAL) 

V 

* 

R4 :  VFT .LOCK 

V 

V 

R13:LCGICAL  CPU  # 

V 

?*¥¥* »»■** w  W f 


029  C 

93F1 

029E 

7C01 

02A0 

7604 

02A2 

00e0' 

02A4 

5F00 

02A6 

0282  ' 

02A8 

5F0fc 

02AA 

02C8' 

02AC 

A11D 

02AE 

97F1 

02B0 

61D2 

02B2 

0002  ' 

02J34 

6123 

02B6 

0010' 

02B8 

4D06 

02BA 

0000' 

02BC 

7ceb 

02BE 

1900 

02C0 

0004 

02C2 

7130 

02C4 

0100 

ENTP.T 

!  SAVE  SEGMENT  #  I 
PUSH  OR  lb,  R1 

!  MASK  INTERRUPTS  ! 

DI  VI 

!  LOCK  VPT  ! 

IDA  P4t7PT .LOCK 

CALL  SPIN_L0CK  ! R4 :~VPT . LOCK  » 

!  GET  CPU  n  ! 

CALL  G?T_CPU_NO  ! RETURNS  : 

Rl:  CPU  » 
P.2:#  VP'S! 

LD  P13,  Rl 

!  RESTORE  SEGMENT  *  ! 

POP  Rl,  OR 15 

ID  R2,V?T.RUNNlNG_LIST(Rl3) 

ID  R3 , VPT . VP .DBR ( R2 ) 

!  UNLOCK  VPT  ! 

CLR  VPT. LOCK 

!  UNMASK  VECTORED  INTERRUPTS  ! 

El  VI 

MULT  RR0,#4 

LD  Re,R3(Rl) 


02C6  9E08  RET 

02C8  END  ITC  GET  SEG  PTR 
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i 


e2ce 


GST  CPU  NO  PROCEDURE 

*  FIND  CURRENT  CPU  NO  * 

^  CALLED  Bv  DIST  MMGR  * 

*  and  mm  * 

*ss««w«*vvv>i<ii<vvvv)ii 

»  RETURNS  v 

*  Rl:  CPU  NO  * 

»  R2:  #  OF  VP'S  * 

VW VVWVWVVVV VVMVVV  w w»m  I 


ENTRY 


02C8 

6101 

ID 

P.1, 

PP.DS  .L0G_CPU_ID 

02CA 

0A0C  ' 

02CC 

6102 

LD 

R2, 

PRDs . VP_NR 

02CE 

0A0S  ' 

02D0 

9E08 

RET 

02D2 

END  GET_CPU 

_N0 

02D2 

K 

LOCK 

PROCEDURE 

t  wwwwv vvvwv itwtrwww w 


*  STUD  FOR  WAIT  LOCK  * 

*  R4:"10CK  (I.NPJT)  * 

ENTRY 

02D2  5F00  CALL  SPIN  LOCK 

02D4  0282' 

02D6  9E08  RET 

02D8  END  K  LOCX 


02D6  K_UNLOCK  PROCEDURE 

^  STUi  FOR  WAIT  UNLOCK  * 

jpwvqi  ««««***  wmmww*  mm  v** 

v  R4:~L0CK  (INPUT)  * 

W  IfW  vww  9VVWV  «V  WM  V«  V  w  I 

ENTRY 

02D8  0D48  CLP  PP.4 

02DA  9E08  RET 

02DC  END  K_UNL0CK 

END  INNER  TRAFFIC  CONTROL 
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